Aerosol-Generating Devices Unlockable with Wireless Communications

This application claims the benefit of U.S. Provisional Application No. 63/733,706 filed on Dec. 13, 2024. The entire disclosure of the above application is incorporated herein by reference.

The present disclosure relates to aerosol-generating device unlockable with wireless communications.

Aerosol-generating devices generally heat a material to a temperature sufficient to release constituents of the material. Such aerosol-generating devices may include electronic-vaping devices that heat a pre-vapor formulation and heated tobacco devices that heat an aerosol-forming substrate. Some aerosol-generating devices may be in a locked state to prevent unauthorized consumers from using the devices. Such devices may be unlocked via wireless communications, such as Bluetooth® communication, near-field communications (NFC), Wi-Fi communication, and radio frequency identification (RFID) communications.

At least some example embodiments relate to aerosol-generating devices.

In some example embodiments, an aerosol-generating device includes a memory configured to store computer-readable instructions and a private key, and a controller configured to execute the computer-readable instructions to cause the aerosol-generating device to receive, from an operator terminal via near-field communication (NFC), an encrypted pass, the encrypted pass including at least one control parameter for the aerosol-generating device, the encrypted pass specific to an authenticated consumer, decrypt the pass using the stored private key to retrieve the at least one control parameter for the aerosol-generating device, and in response to decrypting the pass, unlock the aerosol-generating device and control the aerosol-generating device based on the at least one control parameter.

At least some example embodiments relate to methods for unlocking aerosol-generating devices.

In some example embodiments, a method for unlocking an aerosol-generating device in communication with an operator terminal, includes receiving, from an operator terminal via near-field communication (NFC), an encrypted pass including at least one control parameter for an aerosol-generating device, the encrypted pass specific to an authenticated consumer, decrypting the pass using a private key to retrieve the at least one control parameter for the aerosol-generating device, and in response to decrypting the pass, unlocking the aerosol-generating device and controlling the aerosol-generating device based on the at least one control parameter.

In some example embodiments, a method for unlocking an aerosol-generating device in communication with an operator terminal, includes activating a pass stored in an application of an operator terminal in response to user input, the pass including at least one control parameter for an aerosol-generating device, the pass specific to a consumer, detecting a near-field communication (NFC) tag associated with the aerosol-generating device, in response to detecting the NFC tag and activating the pass, encrypting the pass stored in the application using a public key stored in the application, and transmitting, to the aerosol-generating device via NFC, the encrypted pass including the at least one control parameter for controlling the aerosol-generating device.

At least some example embodiments relate to systems for unlocking aerosol-generating devices.

In some example embodiments, a system for unlocking an aerosol-generating device, includes an aerosol-generating device and an operator terminal. The aerosol-generating device includes a first memory configured to store first computer-readable instructions and a private key, and a first controller. The operator terminal includes a second memory configured to store second computer-readable instructions, a digital wallet application configured to store a pass and a public key, and a second controller. The pass includes at least one control parameter for the aerosol-generating device. The pass is specific to an authenticated consumer. The second controller is configured to execute the second computer-readable instructions to cause the operator terminal to encrypt the pass stored in the digital wallet application using the public key, and transmit, to the aerosol-generating device via near-field communication (NFC), the encrypted pass including the at least one control parameter for the aerosol-generating device. The first controller is configured to execute the first computer-readable instructions to cause the aerosol-generating device to receive, via NFC, the encrypted pass including at least one control parameter for the aerosol-generating device, decrypt the pass using the stored private key to retrieve the at least one control parameter for the aerosol-generating device, and in response to decrypting the pass, unlock the aerosol-generating device and control the aerosol-generating device based on the at least one control parameter.

Some detailed example embodiments are disclosed herein. However, specific structural and functional details disclosed herein are merely representative for purposes of describing example embodiments. Example embodiments may, however, be embodied in many alternate forms and should not be construed as limited to only the example embodiments set forth herein.

Accordingly, while example embodiments are capable of various modifications and alternative forms, example embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that there is no intent to limit example embodiments to the particular forms disclosed, but to the contrary, example embodiments are to cover all modifications, equivalents, and alternatives falling within the scope of example embodiments. Like numbers refer to like elements throughout the description of the figures.

It should be understood that when an element or layer is referred to as being “on,” “connected to,” “coupled to,” “attached to,” “adjacent to,” or “covering” another element or layer, it may be directly on, connected to, coupled to, attached to, adjacent to or covering the other element or layer or intervening elements or layers may be present. In contrast, when an element is referred to as being “directly on,” “directly connected to,” or “directly coupled to” another element or layer, there are no intervening elements or layers present. Like numbers refer to like elements throughout the specification. As used herein, the term “and/or” includes any and all combinations or sub-combinations of one or more of the associated listed items.

It should be understood that, although the terms first, second, third, etc. may be used herein to describe various elements, components, regions, layers and/or sections, these elements, components, regions, layers, and/or sections should not be limited by these terms. These terms are only used to distinguish one element, component, region, layer, or section from another region, layer, or section. Thus, a first element, component, region, layer, or section discussed below could be termed a second element, component, region, layer, or section without departing from the teachings of example embodiments.

Spatially relative terms (e.g., “beneath,” “below,” “lower,” “above,” “upper,” and the like) may be used herein for ease of description to describe one element or feature's relationship to another element(s) or feature(s) as illustrated in the figures. It should be understood that the spatially relative terms are intended to encompass different orientations of the device in use or operation in addition to the orientation depicted in the figures. For example, if the device in the figures is turned over, elements described as “below” or “beneath” other elements or features would then be oriented “above” the other elements or features. Thus, the term “below” may encompass both an orientation of above and below. The device may be otherwise oriented (rotated 90 degrees or at other orientations) and the spatially relative descriptors used herein interpreted accordingly.

The terminology used herein is for the purpose of describing various example embodiments only and is not intended to be limiting of example embodiments. As used herein, the singular forms “a,” “an,” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms “includes,” “including,” “comprises,” and/or “comprising,” when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.

While the term “same” or “identical” is used in description of example embodiments, it should be understood that some imprecisions may exist. Thus, when one element is referred to as being the same as another element, it should be understood that an element or a value is the same as another element within a desired manufacturing or operational tolerance range (e.g., ±10%).

When the terms “about” or “substantially” are used in this specification in connection with a numerical value, it is intended that the associated numerical value includes a manufacturing or operational tolerance (e.g., ±10%) around the stated numerical value. Moreover, when the words “generally” and “substantially” are used in connection with geometric shapes, it is intended that precision of the geometric shape is not required but that latitude for the shape is within the scope of the disclosure. Further, regardless of whether numerical values or shapes are modified as “about” or “substantially,” it will be understood that these values and shapes should be construed as including a manufacturing or operational tolerance (e.g., ±10%) around the stated numerical values or shapes.

Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which example embodiments belong. It will be further understood that terms, including those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.

Aerosol-generating devices may heat a material to a temperature sufficient to release constituents of the material and/or employ other aerosol-generating means to release constituents of the material, such as ultrasonic, piezo actuation, pneumatic dispersions, etc. Some aerosol-generating devices may be in a locked state to prevent unauthorized consumers from using the devices. Such devices may be unlocked with a mobile computing device via wireless communications. In many cases, the process for unlocking the devices is cumbersome and sometimes restricted due to particular restrictions associated with the mobile computing device.

The systems, aerosol-generating devices, and methods according to the present disclosure leverage one or more wireless communication protocols between the devices and other consumer-controlled devices (e.g., operator terminals, government-issued biometric identifications, payment cards, etc.) to unlock the aerosol-generating devices. Such techniques enable the unlocking of the aerosol-generating devices in a consumer-friendly manner for adult consumers (e.g., consumers of an appropriate or legal age of adulthood, such as 18 years old, etc.), while also providing increased security measures to prevent unauthenticated consumers from using the devices.

In some embodiments, near-field communication (NFC) may be used between the devices and operator terminals to unlock the aerosol-generating devices. For example, and as further explained herein, an aerosol-generating device may receive an encrypted pass from an operator terminal associated with an adult consumer, in which the encrypted pass optionally includes at least one control parameter for the aerosol-generating device. In such examples, the pass may be created if the consumer is appropriately authenticated, may be encrypted with a public key, and may be stored in a digital wallet application of the operator terminal or in another suitable location accessible by the operator terminal. Once received, the aerosol-generating device may decrypt the pass using a unique private key stored therein to retrieve the at least one optional control parameter for the aerosol-generating device. Then, in response to decrypting the pass, the aerosol-generating device may be unlocked and controlled based on the at least one optional control parameter in the received pass.

As such, in these examples, the aerosol-generating devices may be unlocked and controlled by leveraging NFC communication between the devices and operator terminals. For example, NFC communication provides simplified use and pairing between the devices and operator terminals, consumer-friendly interactions, and low power consumption, while also providing enhanced security of the aerosol-generating devices by preventing unauthenticated consumers from using the devices and requiring proximity between the operator terminals and devices. Further, NFC communication may be leveraged to control the aerosol-generating devices by enabling the passage of control parameters in a secure data stream from the operator terminals to the aerosol-generating devices. In doing so, firmware settings in the aerosol-generating devices may be altered, thereby directing the devices to operate under custom control scenarios established by authenticated consumers.

Additionally, the systems, aerosol-generating devices, and methods herein may leverage the use of existing credentials to enable adult consumers to unlock and access the devices in a consumer-friendly manner, while also providing increased security measures to prevent unauthenticated consumers from using the devices. The existing credentials may include, for example, a government-issued digital identification (e.g., a mobile identification, such as a mobile driver's license (mDL), a mobile passport, a mobile non-driver's license, etc.) containing verified customer data and a physical document, such as a government-issued biometric identification (e.g., a biometric passport, etc.) containing verified customer data, a payment card (e.g., a bank card, etc.) containing verified customer data, etc. In such examples, the government-issued digital identification can be accessed through government-regulated applications containing the digital identifications or verified customer data corresponding thereto. In some examples, a digital pass may be created based on an existing credential (e.g., a digital identification, etc.) and stored in a digital wallet application of an operator terminal (e.g., a smart phone, etc.) for wirelessly unlocking an aerosol-generating device. In other examples, an existing physical, biometric identification (ID) or payment card can be used to wirelessly unlock an aerosol-generating device without necessary interaction with an operator terminal.

Using existing credentials to unlock the aerosol-generating devices provides a simplified, consumer-friendly approach for adult consumers to access the devices. For example, the aerosol-generating devices may be unlocked through an existing credential and any suitable wireless communication, such as NFC, Bluetooth® communication, Wi-Fi communication, and radio frequency identification (RFID) communication. Such wireless communication techniques can provide simplified use and pairing, consumer-friendly interactions, and low power consumption, while also providing enhanced security of the aerosol-generating devices by preventing unauthenticated consumers from using the devices. Additionally, and as further explained herein, the wireless communication techniques may be leveraged to control the aerosol-generating devices by enabling the passage of control parameters in a secured data stream to the aerosol-generating devices. In doing so, firmware settings in the aerosol-generating devices may be altered, thereby directing the devices to operate under custom control scenarios established by authenticated consumers.

1 FIG. 1 FIG. 100 102 104 100 102 104 106 104 102 106 illustrates an example systemfor unlocking an aerosol-generating devicewith an operator terminalvia NFC. As shown in, the systemgenerally includes the aerosol-generating device, the operator terminal, and an authentication server. In this example, the operator terminalis in wireless communication with the aerosol-generating deviceand the authentication server.

1 FIG. 102 104 106 102 108 110 104 118 120 106 128 130 108 118 128 110 120 130 108 18 128 110 120 130 As shown in, the aerosol-generating device, the operator terminal, and the authentication servereach includes a controller and a memory. Specifically, the aerosol-generating deviceincludes a controllerand a memory, the operator terminalincludes a controllerand a memory, and the authentication serverincludes a controllerand a memory. In various embodiments, each controller,,may include processing circuitry such as hardware including logic circuits, a hardware/software combination such as a processor executing software, or a combination thereof. For example, the processing circuitry may include, but is not limited to, a central processing unit (CPU), an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA), a System-on-Chip (SoC), a programmable logic unit, a microprocessor, application-specific integrated circuit (ASIC), etc. Additionally, each memory,,may be a non-volatile memory storing computer-readable instructions for the respective controller,,to perform algorithms described herein. As an example, any one of or each memory,,may be an electrically erasable programmable read-only memory (EEPROM), such as a flash memory or the like.

1 FIG. 102 114 116 114 114 114 114 102 116 116 114 116 102 In the example of, the aerosol-generating devicefurther includes an NFC tagand an NFC reader. In such examples, the NFC tagmay be a passive component that uses electromagnetic fields to receive power from a nearby NFC reader, such as an NFC reader in another device that reads the NFC tag. When an NFC reader is placed near the NFC tag(e.g., within 4 centimeters, within 5 centimeters, etc.), the NFC tagcan wirelessly transmit data from the aerosol-generating deviceto the NFC reader. The NFC readeris an active component that can wirelessly communicate (e.g., bidirectionally) with an NFC tag of another device. For example, the NFC readercan read (e.g., receive) data from an NFC tag and write (e.g., transmit) data to an NFC tag, etc. In various embodiments, the NFC tagand/or the NFC readermay be embedded in a body of the device, located within the body (e.g., on a circuit board, etc.), etc.

114 116 102 114 116 1 FIG. In various embodiments, the NFC tagand the NFC readermay be separate components (e.g., separate transceivers on the same or different chipset) of the aerosol-generating deviceas generally shown in. In other examples, the NFC tagand the NFC readermay be implemented with a single chipset switching between a tag mode and a reader mode. In such examples, a single transceiver may be configured by software to function as a tag or a reader.

102 102 102 102 In various embodiments, the aerosol-generating devicemay be any suitable device that heats a material therein to a temperature sufficient to release constituents of the material. As examples only, and as further explained herein, the aerosol-generating devicemay be an electronic-vaping (“e-vaping”) device that heats a pre-vapor formulation, a heated tobacco device that heats an aerosol-forming substrate, etc. Additionally, in some examples, the aerosol-generating devicemay be configured to receive a consumable designed to be depleted/expended via use. In such examples, the consumable may be removable from the aerosol-generating devicewhen desired. As examples only, the consumable may include a cigarette, a heat stick, a pod, a cartridge, a capsule, a volatilizable material that can be optionally contained in, for example, a cartridge or capsule, etc.

1 FIG. 104 122 122 122 122 With continued reference to, the operator terminalfurther includes a digital wallet application. The digital wallet applicationmay generally store information relating to payment cards (e.g., credit cards, debit cards, gift cards, etc.), bank accounts, event tickets, validated information (e.g., a government ID such as a driver license, a passport, etc.), etc. As examples only, the digital wallet applicationmay be the Apply Pay® mobile payments solution, the Google Wallet™ digital wallet, the Samsung Pay® digital wallet, etc. Then, when desired, the digital wallet applicationmay be accessed for transactions, etc.

104 134 136 138 134 136 104 114 116 102 134 136 104 138 1 FIG. In various embodiments, the operator terminalfurther includes an NFC tag, an NFC reader, and a display. In such examples, the NFC tagand the NFC readerof the operator terminalmay function in a similar manner as the NFC tagand the NFC readerof the aerosol-generating deviceexplained above. Additionally, the NFC tagand the NFC readermay be separate components (e.g., separate transceivers on the same or different chipset) of the operator terminal(as generally shown in) or may be implemented with a single chipset switching between a tag mode and a reader mode. In such examples, a single transceiver may be configured by software to function as a tag or a reader. The displaymay be any suitable device that is configured to render content including, for example, interfaces (e.g., interactive user interfaces, etc.), etc.

104 104 The operator terminalmay be any suitable computing device associated with an adult consumer. For example, the operator terminalmay be a mobile or static computing device associated with and generally controlled by the adult consumer. The mobile computing device may include, for example, a smart phone, a tablet, a laptop, a wearable device (e.g., a watch such as a smart watch paired to a smart phone, etc.) etc. In such examples, the smart phone may be any suitable type, such as Apple® iPhone® devices, Android™ based devices, etc.

102 126 112 112 126 112 In various embodiments, a key pair may be created for the aerosol-generating device. The key pair includes a set of cryptographic keys, such as a public keyused to encrypt data and a private keyused to decrypt data. In such examples, the private keyis a secret, mathematical key that is used in conjunction with the public keyto encrypt and decrypt data. The private keymay include a unique sequence of bits that are typically long and random or pseudo-random.

102 104 102 104 102 104 In such examples, the key pair may be specific to the aerosol-generating deviceitself, a collection of aerosol-generating devices, a verified adult consumer, and/or the operator terminal. For example, the key pair may be created based on a device specific identifier for the device, one or more stock keeping units (SKUs) specific to a brand of aerosol-generating devices, based on consumer credentials, a specific identifier for the operator terminal, etc. As such, the key pair may be employed to unlock only the aerosol-generating deviceand/or any one of a collection of aerosol-generating devices (e.g., all of which are owned by and tied to the adult consumer, tied to the operator terminal, etc.), as further explained below.

102 112 110 102 126 106 112 126 102 102 The key pair may be created during manufacturing of the device. In such examples, the private keymay be stored or otherwise programmed into the memoryof the aerosol-generating deviceand the public keymay be provided to, for example, the authentication server. In other examples, the private keyand/or public keymay be created before manufacturing of the deviceor created after manufacturing of the deviceif desired.

126 104 104 102 102 102 102 102 102 110 102 In various embodiments, the public keymay be provided to the operator terminalwhen, for example, the adult consumer is authenticated (e.g., age verified, etc.). This may be accomplished via an age verification process completed via the operator terminal. For example, the aerosol-generating devicemay be purchased or otherwise obtained by the adult consumer. At this time, the aerosol-generating deviceis in a locked state. Generally, the aerosol-generating devicemay be in a locked state when manufactured or another time before the deviceis purchased or obtained by the adult consumer. For instance, a power source in the devicemay be disconnected (e.g., locked out) from a heater in the device. In other examples, a flag or bit may be set in the memoryof the deviceto prevent the heater from operating.

104 102 136 104 114 104 102 104 102 104 102 136 114 102 260 102 250 2 FIG. 2 FIG. Then, the operator terminalmay be placed near the aerosol-generating deviceto initiate the age verification process. For example, the NFC readerof the operator terminalmay be placed near the NFC tag(e.g., within 4 centimeters, within 5 centimeters, etc.). As one example, the operator terminalmay be placed in contact with (e.g., tapped against) the aerosol-generating device. For example,depicts one example of this interaction between the operator terminaland the aerosol-generating devicein a locked state. In this example, the operator terminal(e.g., shown as a smart phone) is placed near the aerosol-generating device, to enable the NFC readerto communicate with the NFC tag. Additionally, in some examples, the aerosol-generating devicemay provide a notification of the locked state. For example, and as shown in, a displayof the aerosol-generating devicemay provide an indicator, such as a locked padlock.

114 118 104 118 138 102 138 118 104 104 102 104 138 104 350 104 360 102 370 380 106 3 FIG. In response to detecting the NFC tag, the controllermay cause the operator terminalto display an interactive user interface for authenticating the adult consumer. For example, the controllermay cause the displayto present a link to a website to register the device. Once selected, the interactive user interface may be presented by the display. In other examples, the controllermay cause the operator terminalto automatically launch the website to present the interactive user interface. Then, the interactive user interface may be utilized to input consumer authenticating data. For example, the adult consumer may upload a picture of an identification (e.g., a driver's license, a passport, etc.), input a date of birth, social security number, and/or specific verifiable credentials of the adult consumer. Also, during this time, the adult consumer may select or otherwise provide other inputs, such as a specific operating system and/or device brand of the operator terminal, an owner of the device, etc. For example,depicts one example of this interaction with the operator terminal. In this example, the displayof the operator terminal(e.g., shown as a smart phone) renders the interactive user interface (e.g., via a website) with various inputs, including an inputfor specifying an operating system of the operator terminal, an inputfor identifying the owner of the device, and an inputfor uploading or otherwise inputting consumer credentials. Once the necessary data is provided, the adult consumer may select an inputfor transmitting the provided data to the authentication server.

104 140 102 140 142 104 136 142 118 104 In other examples, the operator terminalmay be placed near a storage casefor the aerosol-generating deviceto initiate the age verification process. In such examples, the storage case (e.g., a device case, etc.)may include a readable tag, such as an NFC tag, a QR code, etc. readable by the operator terminal(e.g., by the NFC reader, a camera, etc.). In response to detecting the readable tag, the controllermay cause the operator terminalto display an interactive user interface for authenticating the adult consumer, as explained above.

102 106 In still other embodiments, the age verification process may be completed via a point-of-sale terminal. For example, when the aerosol-generating deviceis obtained by the adult consumer, the point-of-sale terminal may initiate the age verification process via input from the consumer or another individual (e.g., a salesperson). In such examples, the adult consumer may provide an identification (e.g., a driver's license, a passport, etc.), a phone number, a date of birth, etc. to the point-of-sale terminal and/or to an individual operating the point-of-sale terminal. Once the necessary data is provided, the point-of-sale terminal may transmit the provided data to the authentication server.

1 FIG. 106 106 106 106 132 132 106 106 132 102 102 With continued reference to, the authentication servermay then authenticate the adult consumer, and more specifically the consumer credentials. For example, the authentication servermay verify the age of the adult consumer based on the consumer credentials and known credentials. For instance, the authentication servermay read the provided data, scrape the uploaded picture, etc. to obtain the consumer credentials (e.g., name, date of birth, address, etc.). Then, the authentication servermay request verified data from a databasefor that consumer. In such examples, the databasemay be a secured database (e.g., a third-party database) accessible by the authentication server. The authentication servermay then compare the provided consumer credentials with the verified data from the database. If the consumer credentials are valid and the consumer meets one or more thresholds (e.g., a defined age, a defined location, etc.), the consumer may be verified for using the aerosol-generating device. If the consumer credentials are invalid or the consumer does not meet one or more thresholds, the consumer may not be verified for using the aerosol-generating device.

106 124 124 104 126 104 124 126 122 104 118 138 124 126 106 122 104 106 104 124 104 124 104 1 FIG. If verified, the authentication serverproceeds with creating a pass (e.g. a payload pass)specific to the authenticated adult consumer. In such examples, the passis provided to the operator terminal, along with the public key. Then, the operator terminalmay store the passand the public keyin the digital wallet applicationas shown in, or in another suitable application of the operator terminal. For example, once created, the controllermay cause the displayto present a link to download the passand the public keyfrom the authentication serverto the digital wallet applicationor another suitable application of the operator terminal. This link may be pushed by the authentication serverto the operator terminalvia, for example, the provided phone number. In such examples, the passmay be also specific to the operator terminal. As such, the passmay be only downable by the operator terminaland/or not transferable to another operator terminal or another consumer.

124 104 124 104 124 In some examples, the passmay be stored in another location, such as remotely from the operator terminal. For example, the passmay be stored by another server and then accessible by the operator terminalwhen desired. In such examples, the passmay be used in conjunction with a web NFC protocol.

4 FIG. 1 FIG. 104 124 122 124 106 450 460 102 470 102 480 102 450 460 460 106 126 124 460 102 As one example,depicts one example of the operator terminal(e.g., shown as a smart phone) including the passstored in the digital wallet applicationof. As shown, the passcreated by the authentication serverincludes a string data message, an identifierfor the aerosol-generating device, a type or nameof the device, and a nameof the owner for the device. In such examples, the string data messagemay include the identifieralong with other data that is passable to another device (as further explained below). In various embodiments, the identifiermay be initially provided to the authentication server(along with the public key) before the passis created. In this example, while the identifierspecific to the aerosol-generating deviceis shown as “016C911C,” it should be appreciated that any suitable identifier may be employed.

124 102 106 In various embodiments, the passmay include one or more control parameters for the aerosol-generating device. In such examples, at least one control parameter may be input via the interactive user interface, the point-of-sale terminal, etc. during the age verification process explained above. With this configuration, the control parameter(s) may be provided to the authentication serverduring the age verification process. In other examples, the control parameter(s) may be provided and/or updated after the age verification process.

104 390 124 490 102 102 3 FIG. In such examples, the control parameter(s) may be user defined settings. As an example, the control parameter(s) may include an unlock interval setting specifying a condition for transitioning back to a locked state. For example, the unlock interval setting may refer to a defined period of time, a defined number of puffs, an amount consumed, etc. As examples only, the defined period of time may be no more than 30 minutes, no more than 10 minutes, no more than 5 minutes, etc. For example, the interactive user interface of the operator terminalinis shown as including an inputfor providing an unlock time of 30 minutes. As such, in this example, the passincludes a device unlock time control parameterspecifying an unlock time of 30 minutes. In other examples, the unlock interval setting may be the removal and/or completion of a consumable (e.g., a pod, a cartridge, etc.) from the device. If this condition is met (e.g., removal and/or completion of the consumable is detected, etc.), the devicemay transition to the locked state.

102 102 260 2 FIG. In still other examples, the control parameter(s) may include other optional settings, such as a temperature setting, a puff profile, a power setting, an interface setting, a consumer notification setting, etc. for the aerosol-generating device. In such examples, the temperature setting may include a preferred temperature setpoints selected by the adult consumer for heating an aerosol-forming substrate, a pre-vapor formulation, etc. The puff profile may enable the adult consumer to select from a table of heating profiles pre-configured on the device(e.g. a tobacco setting, a menthol setting, etc.). The power setting may allow the adult consumer to select from power profiles having different setpoints. The interface setting (e.g., human machine interface settings) may allow the adult consumer to select different options for the displayof. The consumer notification setting may allow the consumer to select different alert configurations, such as different haptic settings, etc.

106 124 124 104 104 102 102 124 122 124 390 450 102 4 FIG. 3 FIG. Then, once the adult consumer is verified as explained above, the authentication servercreates the passwith the provided control parameter(s) therein. As such, when the passis provided to the operator terminaland/or another location accessible by the operator terminal, so too are the specific control parameter(s) for the device. Such control parameter(s) for the devicemay be included with the passwhen it is stored in the digital wallet applicationand/or in the other accessible location. For example, the passofis shown as including the control parameter (e.g., a 30 minute unlock time) provided via the inputof. Additionally, the string data messagealso includes the specific control parameter(s) for the device(e.g., “030”).

106 124 124 If the control parameter(s) are provided and/or updated after the age verification process, the authentication servermay generate an updated pass similar to the passbut with the new control parameter(s) and a new string data message based on the new control parameter(s). In such examples, the passmay maintain the same device credentials, consumer credentials, etc.

1 FIG. 124 122 104 102 102 124 124 124 122 124 124 124 102 124 122 With continued reference to, once the passis created and stored in the digital wallet applicationand/or in the other accessible location, the operator terminalmay initiate interaction with the aerosol-generating deviceto unlock the device. In this example, the adult consumer may be required to take active steps to initiate the interaction. For example, the passmay be required to be activated before use. In such examples, the passmay be activated in response to user input. For instance, the adult consumer may select the passin the digital wallet application, select an activate input associated with the pass, etc. Once the passis activated (e.g., is active), the passmay be utilized to unlock the deviceas further explained below. In various embodiments, the passmay become deactivated (e.g., time out) if not used within a period of time of being activated. This time out period may be a user defined setting associated with the digital wallet application.

104 102 102 104 102 104 102 104 102 104 102 136 104 114 102 In various embodiments, the operator terminalmay then be placed near the aerosol-generating deviceto initiate unlocking of the device. For example, the operator terminalmay be placed within 4 centimeters, within 5 centimeters, etc. of the device. As one example, the operator terminalmay be placed in contact with (e.g., tapped against) the aerosol-generating device. With this arrangement, the operator terminalmay detect the aerosol-generating device. More specifically, if the operator terminaland the aerosol-generating deviceare within a sufficient distance apart, the NFC readerof the operator terminalmay detect the NFC tagof the device.

102 104 102 102 104 124 118 102 124 In other examples, the aerosol-generating devicemay detect the operator terminalin the vicinity of the device. When this occurs, the devicemay transmit a signal (via NFC) to the operator terminal, thereby prompting the adult consumer to activate the passfor use. In such examples, the controllermay generate a notification indicating the deviceis nearby and ask if the adult consumer wants to proceed. Then, the adult consumer may provide input (e.g., tap on the notification, open an application, etc.) to open the passfor activation as explained above.

114 102 114 136 102 114 102 102 114 102 114 136 102 5 FIG. In various embodiments, the NFC tagof the aerosol-generating devicemay be detectable only if one or more conditions are met. For example, in some embodiments the NFC tagmay be detectable (e.g., by the NFC readerand/or other NFC readers) only if the aerosol-generating deviceis in a locked state, such as shown in. In such examples, the NFC tagmay be active (e.g., detectable) when the deviceis in the locked state. Conversely, if the deviceis in an unlocked state, the NFC tagmay be inactive (e.g., undetectable). With this configuration, a power source associated with the devicemay provide power to the NFC tagand/or the NFC readeronly when the deviceis in the locked state, thereby preserving power of the power source.

5 FIG. 4 FIG. 104 102 104 102 136 114 104 124 450 For example,depicts one example of an interaction between the operator terminaland the aerosol-generating device. In this example, the operator terminal(e.g., shown as a smart phone) is placed near the aerosol-generating device, to enable the NFC readerto detect the NFC tag. As shown, the operator terminalincludes the stored passhaving the string data messageof.

102 104 124 126 122 126 450 122 5 FIG. Once the aerosol-generating deviceis detected, the operator terminalmay encrypt the passusing the public key. For example, the digital wallet applicationmay use the public keyto scramble, change, etc. the string data messageof. In other examples, the digital wallet applicationmay utilize another encryption method, such as implementing a hash function (e.g., with or without being salted) if desired.

118 104 104 124 102 118 134 124 116 102 124 134 104 Then, once encrypted, the controllerof the operator terminalcauses the operator terminalto transmit the encrypted passto the aerosol-generating device. For example, the controllermay enable or activate the NFC tagonce the passis encrypted. In such examples, the NFC readerof the aerosol-generating devicemay retrieve or otherwise receive the encrypted passfrom the NFC tagof the operator terminal.

102 124 102 108 102 110 110 102 102 260 102 550 5 FIG. The aerosol-generating devicemay then determine whether the passis valid and if so, unlock. For instance, to unlock the aerosol-generating device, the controllermay connect the power source and the heater in the device. In other examples, a locking flag or bit set in the memorymay be cleared, thereby allowing the heater to receive power. In still other examples, a flag or bit may be set in the memoryof the deviceto allow the heater to receive power. In some examples, the aerosol-generating devicemay provide a notification of the unlocked state. For example, and as shown in, the displayof the aerosol-generating devicemay provide an indicator, such as an unlocked padlock.

102 124 108 112 110 102 124 112 108 450 112 108 450 124 450 108 102 108 102 124 The aerosol-generating devicemay determine whether the passis valid in different manners. For example, the controllermay retrieve the private keyfrom the memoryin the aerosol-generating device, and then attempt to decrypt the received passusing the private key. More specifically, the controllerattempts to decrypt the string data messageusing the private key. In some examples, if the controllercan decrypt the string data message, the passis valid. Then, in response to decrypting the string data message, the controllermay unlock the aerosol-generating device. As such, in this example, the controllermay automatically unlock the aerosol-generating devicein response to decrypting the pass.

102 124 450 112 108 460 450 108 460 110 110 102 108 124 450 460 124 450 108 102 124 124 In other examples, the aerosol-generating devicemay take additional steps to ensure the passis valid. For example, after the string data messageis decrypted with the private key, the controllermay retrieve the identifier(or, for example, a SKU, etc.) from the message. Then, the controllermay compare the retrieved identifierwith a device identifier stored in the memory. In such examples, the device identifier may be stored in the memorybefore, during, and/or after manufacturing of the device. The controllermay then determine whether the received pass(e.g., the received string data message) is valid based on the comparison. For instance, if the retrieved identifierand the stored device identifier match, the passmay be determined to be valid. Similar steps may be taken if, for example, the string data messagemay include a SKU. As such, in this example, the controllermay unlock the aerosol-generating devicein response to decrypting the passand determining that the passis valid.

102 102 124 450 102 102 450 108 102 In various embodiments, the aerosol-generating devicemay be operated based on the control parameter(s) after the deviceis unlocked. For example, and as explained above, the passmay be created with user defined control parameter(s), such as an unlock interval setting, a temperature setting, a puff profile, a power setting, an interface setting, a consumer notification setting, etc. In such examples, the string data messageprovided to the aerosol-generating devicemay include each of the control parameter(s) for the device. Thus, when the string data messageis decrypted, the controllermay retrieve and store the control parameter(s) for the device.

108 102 108 102 108 102 260 108 102 5 FIG. Then, the controllermay control the aerosol-generating devicebased on at least one of the received control parameter(s). For instance, if an unlock interval setting is received, the controllermay unlock the aerosol-generating deviceuntil one or more conditions associated with the unlock interval setting are met. Then, the controllermay automatically lock the device. For example, the unlock interval setting may be a period of 30 minutes, as indicated on the displayofor another suitable period. In this example, the controllerlocks the devicein response to the period (e.g., 30 minutes, etc.) expiring.

108 102 108 102 102 102 108 102 In other examples, the controllermay not automatically lock the aerosol-generating deviceafter the interval setting (e.g., a period). Instead, the controllermay lock the devicein response to the period (e.g., 30 minutes, etc.) expiring and a heater in the devicebeing inactive. In such examples, if the heater is active in the device(e.g., in use), the controllerwaits until the next time the heater is inactive before locking the device, thereby preventing a negative consumer experience.

102 108 102 102 108 102 108 102 102 In still other examples, the unlock interval setting may be related to the removal of a consumable (e.g., a pod, a cartridge, etc.) from the aerosol-generating device. For example, the controllermay detect if a consumable is removed from the device. If the deviceis in an unlocked state, the controllermay automatically lock the devicein response to the detected removal. In other examples, the controllermay detect when a new consumable is received, and then automatically lock the devicein response. In either case, the aerosol-generating deviceis in a locked state when a new consumable is received.

6 FIG. 6 FIG. 600 602 604 600 602 604 606 602 604 604 602 606 illustrates an example systemfor unlocking an aerosol-generating devicewith an operator terminalthrough the use of at least one existing credential unique to an adult consumer. As shown in, the systemgenerally includes the aerosol-generating device, the operator terminal, and a web serverexternal to the aerosol-generating deviceand the operator terminal. In this example, the operator terminalis in wireless communication with the aerosol-generating deviceand the web server.

602 102 602 108 110 112 114 116 602 614 614 604 6 FIG. 1 FIG. 6 FIG. 1 FIG. The aerosol-generating deviceofis similar to the aerosol-generating deviceof. For example, the aerosol-generating deviceofincludes the controller, the memorystoring the private key, the NFC tagand the NFC readerof, all of which are described above. Additionally, the aerosol-generating devicemay include one or more wireless communication chips, such as a wireless communication chiphaving a wireless protocol capability different than NFC. For instance, the wireless communication chipmay be a Bluetooth® chip, a Wi-Fi chip, etc. for communicating with the operator terminaland/or another suitable device.

604 104 604 118 120 134 136 138 604 616 616 602 606 6 FIG. 1 FIG. 6 FIG. 1 FIG. Additionally, the operator terminalofis similar to the operator terminalof. For example, the operator terminalofincludes the controller, the memory, the NFC tag, the NFC readerand the displayof, all of which are described above. Additionally, the operator terminalmay include one or more wireless communication chips, such as a wireless communication chiphaving a wireless protocol capability different than NFC. For instance, the wireless communication chipmay be a Bluetooth® chip, a Wi-Fi chip, etc. for communicating with the aerosol-generating device, the web server, and/or another suitable device.

6 FIG. 1 FIG. 1 FIG. 1 FIG. 1 FIG. 604 622 122 622 624 126 624 124 106 624 126 604 In, the operator terminalfurther includes a digital wallet applicationsimilar to the digital wallet applicationof. For example, the digital wallet applicationmay optionally include a passspecific to the authenticated consumer and the public keyof. In such examples, the passmay be similar to the passof. In this example, the authentication serverofand/or another suitable consumer authenticating device can create and/or provide the passand the public keyto the operator terminal, as explained above.

622 622 618 618 622 6 FIG. Additionally, the digital wallet applicationincludes an existing credential, such as a validated ID unique to the adult consumer. For instance, in, the digital wallet applicationincludes a mobile identificationcontaining verified personal data and obtained from, for example, a government-controlled source. In such examples, the mobile identificationmay include, for example, a mDL, a mobile passport, a mobile non-driver's license or any other suitable digital version of a government-issued identification. In other examples, the digital wallet applicationmay include a proprietary ID containing verified personal data and obtained from, for example, a private source capable of identity and age verification.

604 618 136 604 602 604 140 602 604 136 604 602 604 114 602 602 118 618 1 FIG. In various examples, the operator terminalcan be used to initiate one or more events to retrieve the mobile identificationfrom the government-controlled source and/or the proprietary ID from the private source. This retrieval may be in response to the NFC reader(or another suitable wireless reader) of the operator terminaldetecting a wireless tag associated with the aerosol-generating device. For instance, the operator terminalmay be placed near a storage case (e.g., the storage caseof) for the aerosol-generating device. In this example, the storage case (e.g., a device case, etc.) may include a wireless tag, such as an NFC tag, a QR code, etc. readable by the operator terminal(e.g., by the NFC reader, a camera, etc.). In other examples, the operator terminalmay be placed near the aerosol-generating deviceso that the operator terminalcan read the NFC tag(or another suitable wireless tag) of the device. When the wireless reader detects the wireless tag of the storage case and/or the aerosol-generating device, the controllermay initiate any one of different events to retrieve the mobile identification.

604 618 606 118 604 604 606 618 118 138 In some examples, the operator terminalmay retrieve the mobile identificationand/or the proprietary ID from the web server. For example, in response to detecting the wireless tag, the controllermay cause the operator terminalto launch a web browser at a government-regulated website, a government-regulated application, and/or a proprietary application installed on the operator terminalto communicate with the web serverand access the mobile identificationand/or the proprietary ID. In doing so, the controllermay generate a command to launch the web browser, the government-regulated application, or the proprietary application, any one of which can include an interactive user interface. The adult consumer may then utilize the interactive user interface on the displayto input credentials, such as consumer authenticating data.

606 606 608 106 606 618 604 118 618 622 1 FIG. For example, the adult consumer may upload a picture of an identification (e.g., a driver's license, a passport, etc.), input a date of birth, input a social security number, and/or input specific verifiable credentials of the adult consumer. This information may be sent to the web server(e.g., via an application programming interface (API)), where the web servermay authenticate the adult consumer based on customer data in a databaseor pass the credentials to another suitable device (e.g., the authentication serverof) for authenticating the adult consumer. Then, once authenticated, the web servercan provide the mobile identificationand/or the proprietary ID to the operator terminal(e.g., through the government-regulated website, a government-regulated application, and/or a proprietary application). In turn, the controllercan store the mobile identificationand/or the proprietary ID containing verified personal data in the digital wallet application.

602 618 108 602 604 618 604 Then, the aerosol-generating devicemay be unlocked through the use of the stored mobile identificationand/or the proprietary ID. For example, the controllerof the aerosol-generating devicemay receive from the operator terminal, the verified personal data (or a portion or representative thereof) contained in the mobile identificationand/or the proprietary ID. In such examples, the verified personal data may be transmitted by the operator terminalvia any suitable wireless communication protocol, such as NFC, Bluetooth®, etc.

624 606 106 604 624 618 624 126 For example, once the adult consumer is authenticated, the passmay be created (e.g., by the web server, the authentication server, etc.) and provided to the operator terminal. In such examples, the passmay include the verified personal data from the mobile identificationand/or the proprietary ID. In some examples, the passmay be encrypted with the public key, as explained above.

624 602 134 604 116 602 624 136 604 602 136 114 602 118 622 624 138 604 622 118 624 602 134 604 116 602 Then, the passwith the verified personal data can be transmitted to the devicevia the NFC tagin the operator terminaland the NFC readerin the aerosol-generating device. In some examples, this transmission of the pass(or more specifically, the verified personal data) can be initiated in response to the NFC reader(or another suitable wireless reader) of the operator terminaldetecting a wireless tag associated with the aerosol-generating device, as explained above. For instance, when the NFC readerdetects the NFC tagof the aerosol-generating device, the controllermay launch (e.g., open, etc.) the digital wallet applicationfor initiating transmission of the passcontaining the verified personal data. In such examples, the displayof the operator terminalmay provide a selectable input requesting the adult consumer to confirm this transmission. Once the digital wallet applicationis launched, the controllercan transmit the passto the aerosol-generating devicevia the NFC tagof the operator terminaland the NFC readerof the aerosol-generating device.

618 602 616 604 614 602 604 604 602 604 602 118 604 602 604 604 602 In other examples, the verified personal data from the mobile identificationand/or the proprietary ID may be transmitted to the aerosol-generating devicevia the wireless communication chip(e.g., a Bluetooth® chip) in the operator terminaland the wireless communication chip(e.g., a Bluetooth® chip) in the aerosol-generating device. With this approach, the operator terminalmay be used to initiate a wireless pairing between the operator terminaland the aerosol-generating device. For instance, when a wireless reader of the operator terminaldetects a wireless tag of the aerosol-generating device, the controllermay initiate a Bluetooth® wireless pairing between the operator terminaland the aerosol-generating device. Alternatively, the adult consumer can provide an input to the operator terminalto initiate a Bluetooth® wireless pairing between the operator terminaland the aerosol-generating device.

602 604 602 118 616 602 614 602 In either case, the verified personal data (or a portion or representative thereof) can be transmitted to the aerosol-generating devicevia the Bluetooth® wireless pairing. For example, after the operator terminaland the aerosol-generating deviceare wirelessly paired, the controlleror the wireless communication chipmay generate a data packet including a bit value signifying the adult consumer is verified for using the aerosol-generating device, portions of the verified personal data (e.g., data representing the adult consumer's date of birth, etc.), etc. Then, the data packet may be sent via the Bluetooth® wireless communication protocol to the wireless communication chipof the device.

602 622 604 604 620 602 620 602 620 618 622 620 604 620 602 616 604 614 602 620 138 This transmission of the verified personal data to the aerosol-generating devicevia the Bluetooth® wireless pairing may originate through the digital wallet applicationor another application installed on the operator terminal. For example, the operator terminalmay include an application, such as a progressive web application (PWA) for communicating with the aerosol-generating device. In such examples, the applicationmay be used for unlocking the aerosol-generating device. For example, the applicationmay access the verified personal data (e.g., in the mobile identificationand/or the proprietary ID) stored in the digital wallet applicationvia an API. Then, once the applicationhas access to this verified credential, the operator terminalcan use the applicationto transmit the data to the devicevia the wireless communication chip(e.g., a Bluetooth® chip) in the operator terminaland the wireless communication chip(e.g., a Bluetooth® chip) in the aerosol-generating device, as explained above. In such examples, the applicationmay provide a selectable input on the displayrequesting the adult consumer to confirm or initiate this transmission.

108 602 602 624 624 108 624 112 624 108 Then, through any one of the wireless transmissions explained above, the controllerof the aerosol-generating devicecan receive the verified personal data (or a portion or representative thereof). For example, the aerosol-generating devicecan obtain the verified personal data from the pass. In such examples, if the passis encrypted, the controllercan decrypt the passwith the private keyand retrieve the verified personal data from the pass. In other examples, the controllercan obtain the verified personal data from the received data packet.

108 602 108 108 108 602 602 108 602 110 110 Once the verified personal data is received, the controllercan determine whether the adult consumer meets an age condition based on this data. For example, the verified personal data may include a bit value signifying the adult consumer is verified for using the aerosol-generating deviceand/or data representing the adult consumer's date of birth, data representing the adult consumer's age, etc. In such examples, the controllercan determine whether the adult consumer meets an age condition by recognizing a bit value is true (e.g., is high, etc.), determining the age of the adult consumer is greater than a threshold, etc. If the controllerdetermines that the adult consumer meets an age condition, the controllercan unlock the aerosol-generating device, as explained herein. For instance, to unlock the aerosol-generating device, the controllermay connect a power source and a heater in the device, clear a locking flag or bit set in the memory, set a flag or bit in the memory, etc.

620 602 604 620 602 616 604 614 602 620 602 Additionally, in some examples, the applicationmay be used for configurating the aerosol-generating device. For instance, the operator terminalcan use the applicationto transmit one or more control parameters for the aerosol-generating devicevia the wireless communication chipin the operator terminaland the wireless communication chipin the aerosol-generating device. With this approach, the adult consumer may input some or all of the control parameters via an interactive user interface associated with the application. In such examples, the control parameter(s) may relate to any suitable setting (e.g., user defined settings, optional settings, etc.) for the configurating or controlling the aerosol-generating device, as explained above.

620 602 620 602 616 604 614 602 620 620 Further, the applicationmay be used for obtaining diagnostic data of the aerosol-generating device. For example, the applicationmay receive diagnostic data from the aerosol-generating devicevia the wireless communication chipin the operator terminaland the wireless communication chipin the device. In such examples, the diagnostic data may include, for example, usage data (e.g., usage times, etc.), battery level data (e.g., a remaining battery capacity, etc.), consumable data (e.g., a remaining consumable level, a material or materials in the consumable, etc.). The applicationcan then display such data on the interactive user interface associated with the application.

7 FIG. 6 FIG. 7 FIG. 6 FIG. 7 FIG. 604 620 138 720 620 138 604 602 720 702 704 706 708 710 712 714 716 604 depicts one example of the operator terminalofincluding the application, the display, and an interactive user interfaceprovided with the applicationon the display. As shown in, the operator terminal(e.g., shown as a smart phone) displays various consumer notifications about an aerosol-generating device, such as the aerosol-generating deviceof. For instance, in, the interactive user interfaceprovides an imageof the aerosol-generating device, a remaining consumable level, a remaining capacityof a battery in the aerosol-generating device, an intensity inputselectable by the adult consumer to modify an evaporation rate associated with the aerosol-generating device, a first puffs remaining notificationrepresenting a number of consumer puffs remaining for the consumable associated with the aerosol-generating device, a second puffs remaining notificationrepresenting a number of consumer puffs remaining until the battery in the aerosol-generating device depletes, a manual lock inputselectable by the adult consumer to lock the aerosol-generating device, and a range lock inputselectable by the adult consumer to lock the aerosol-generating device if the device is not within a defined range (e.g., a wireless communication range) of the operator terminal.

In some examples, any one of the aerosol-generating devices herein may be unlocked through the use of another existing credential unique to an adult consumer, such as a physical document having wireless communication capabilities. In such examples, the physical document may include a payment card issued to the adult consumer, a biometric ID issued to the adult consumer, etc.

8 FIG. 6 FIG. 8 FIG. 6 FIG. 8 FIG. 6 FIG. 800 602 800 602 604 808 808 604 602 602 808 For example,illustrates another example systemfor unlocking the aerosol-generating deviceofthrough the use of a physical document having wireless communication capabilities and unique to an adult consumer. As shown in, the systemgenerally includes the aerosol-generating deviceand the operator terminalof, along with a payment card. In, the payment cardand the operator terminalare in wireless communication with the aerosol-generating device. With this arrangement, the aerosol-generating devicemay be unlocked in any one of the manners explained above relative toand/or with the payment cardas further explained below.

800 602 604 102 104 8 FIG. 6 FIG. 1 FIG. While the systemofis shown as including the aerosol-generating deviceand the operator terminalof, it should be appreciated that other example devices and/or operator terminals may be employed, such as the aerosol-generating deviceand/or the operator terminalof.

8 FIG. 808 808 808 In the example of, the payment cardmay be any suitable card having wireless communication capabilities and unique to the adult consumer. For example, the payment cardmay be a debit card, a credit card, or any other suitable contactless bank card issued by a financial institution to the adult consumer, such as a bank, a credit union, a credit card issuer, etc. that handle financial and monetary transactions. In such examples, the payment cardis issued to the adult consumer following a verification process to authenticate the consumer.

8 FIG. 808 824 826 828 826 828 602 824 826 808 As shown in, the payment cardgenerally includes a wireless communication chipand a memoryto store verified personal dataof the adult consumer. The memorymay be, for example, an electrically erasable programmable read-only memory (EEPROM), such as a flash memory or the like. In some examples, the verified personal datamay include a bit value signifying the adult consumer is verified for using the aerosol-generating device(e.g., age verified), data representing the adult consumer's date of birth, etc. In some examples, components of the wireless communication chipand the memorymay be combined into a single chip in the payment card.

8 FIG. 8 FIG. 824 602 604 830 832 830 832 808 824 In, the wireless communication chipmay include a wireless tag and/or a wireless reader for communicating with other devices, such as the aerosol-generating device, the operator terminal, etc. The wireless tag and/or the wireless reader may be, for example, an NFC tagand/or an NFC reader, as shown in. With this approach, the NFC tagand the NFC readermay be separate components (e.g., separate transceivers on the same chipset) in the payment card(as shown) or a single component switching between a tag mode and a reader mode, as explained above. In other examples, the wireless communication chipmay be another suitable wireless communication device, such as a Bluetooth® chip.

8 FIG. 602 108 110 112 114 116 614 614 602 604 118 120 134 136 138 616 620 622 622 126 624 618 616 620 602 In, the aerosol-generating deviceincludes the controller, the memorystoring the private key, the NFC tag, the NFC reader, and the wireless communication chip, all of which are described above. In this example, the wireless communication chipis an optional component in the device. Additionally, the operator terminalincludes the controller, the memory, the NFC tag, the NFC reader, the display, the wireless communication chip, the application, and the digital wallet application, all of which are described above. The digital wallet applicationincludes the public key, the passspecific to the authenticated adult consumer, and the mobile identification(or another suitable form of verified personal data), all of which are described above. The wireless communication chipand the applicationare optional components in the device.

8 FIG. 602 808 808 618 622 620 604 808 618 620 618 808 828 826 604 808 134 136 604 824 808 616 604 808 In the example of, the aerosol-generating devicemay be unlocked through the use of the payment card. For example, the payment cardmay be linked to the mobile identificationstored in the digital wallet application. In such examples, the adult consumer can select an input through the applicationon the operator terminalto link the payment cardand the mobile identification. With this approach, the applicationcan communicate the verified personal data associated with the mobile identificationto the payment card, which then stores the data (e.g., the verified personal data) in the memory. In this example, the operator terminaland the payment cardcan communicate via NFC through the NFC tagand the NFC readerof the operator terminaland the wireless communication chipin the payment card, or via Bluetooth® through the wireless communication chipof the operator terminaland a Bluetooth® wireless communication chip in the payment card.

808 618 622 624 624 624 618 126 604 624 808 134 136 604 824 808 808 624 828 826 Additionally, or alternatively, the payment cardmay be linked to the mobile identificationstored in the digital wallet applicationthrough the pass(e.g., an NFC pass). In such examples, the passcan be created specifically for the authenticated adult consumer, as explained above. With this approach, the passmay include data representing the mobile identificationand be encrypted with the public key. In this example, the operator terminalmay communicate the pass(e.g., the encrypted pass) to the payment cardvia the NFC tagand/or readerof the operator terminaland the wireless communication chipin the payment card. Once received, the payment cardmay store the pass(e.g., the verified personal data) in the memory.

602 828 808 828 602 824 602 624 618 624 624 112 828 602 808 602 116 602 830 808 828 604 602 808 602 602 808 602 Then, the aerosol-generating devicecan obtain the verified personal dataor a representation thereof from the payment card. For example, the verified personal datamay be transmitted to the devicevia the wireless communication chip. In other examples, the aerosol-generating devicecan obtain the passand retrieve data representing the mobile identificationfrom the pass(e.g., by decrypting the passwith the private key, etc.), as explained above. In either example, the verified personal datamay be received by the aerosol-generating devicewhen the payment cardis placed near or in contact with the aerosol-generating device, thereby enabling the NFC readerof the aerosol-generating deviceto detect the NFC tagof the payment cardand initiate receipt of the verified personal data. In such examples, the proximity of the operator terminalto the aerosol-generating deviceis irrelevant as the payment carditself is used to unlock the device. As such, ongoing use of the aerosol-generating deviceis possible by only locating the payment cardnear or in contact with the aerosol-generating device.

808 108 108 108 602 602 108 602 110 110 Once the data from the payment cardis received, the controllercan determine whether the adult consumer meets an age condition based on the received data, as explained above. If the controllerdetermines that the adult consumer meets an age condition based on the received data (e.g., a bit value is true, the age of the adult consumer is greater than a threshold, etc.), the controllercan unlock the aerosol-generating device. In such examples, to unlock the aerosol-generating device, the controllermay connect a power source and a heater in the device, clear a locking flag or bit set in the memory, set a flag or bit in the memory, etc.

9 FIG. 6 FIG. 9 FIG. 6 FIG. 9 FIG. 6 FIG. 6 FIG. 900 602 900 602 908 602 908 604 602 908 illustrates another example systemfor unlocking the aerosol-generating deviceofthrough the use of another physical document having wireless communication capabilities and unique to an adult consumer. Specifically, and as shown in, the systemgenerally includes the aerosol-generating deviceofand a biometric ID. In, the aerosol-generating devicemay be in wireless communication with the biometric IDand/or other devices, such as the operator terminalof. With this arrangement, the aerosol-generating devicemay be unlocked with the biometric IDand/or in any one of the manners explained above relative to.

900 602 102 9 FIG. 1 FIG. While the systemofis shown as including the aerosol-generating device, it should be appreciated that other example aerosol-generating devices may be employed, such as the aerosol-generating deviceof.

9 FIG. 908 908 908 In the example of, the biometric IDmay be any suitable ID having wireless communication capabilities and unique to the adult consumer. For example, the biometric IDmay be any suitable government-issued document having wireless communication capabilities. For instance, the biometric IDmay be a biometric passport (e.g., a biometric passport book, a biometric passport card, etc.), a biometric driver's license, etc. issued by a government institution to the adult consumer following a verification process to authenticate the consumer.

9 FIG. 908 924 926 928 924 926 924 926 908 As shown in, the biometric IDgenerally includes a wireless communication chipand a memoryto store verified personal dataof the adult consumer. The wireless communication chipmay be embedded into a page, a cover, etc. of a biometric passport book or into a plastic body of a biometric driver's license or passport card. The memorymay be, for example, an electrically erasable programmable read-only memory (EEPROM), such as a flash memory or the like. In some examples, components of the wireless communication chipand the memorymay be combined into a single chip in the biometric ID.

9 FIG. 928 928 928 In, the verified personal datamay include one or more pieces of information for identifying and verifying the adult consumer. For example, the verified personal datamay include identification information unique to the adult consumer, such as a name, a date of birth, a social security number, etc. Additionally, in some examples, the verified personal datamay include biometric information, such as a unique physical characteristic of the adult consumer. This unique physical characteristic may include, for example, a facial image, a fingerprint, etc. of the adult consumer.

924 602 930 932 930 932 908 924 9 FIG. The wireless communication chipmay include a wireless tag and/or a wireless reader for communicating with other devices, such as the aerosol-generating device, etc. The wireless tag and/or the wireless reader may be, for example, an NFC tagand/or an NFC reader. With this approach, the NFC tagand the NFC readermay be separate components (e.g., separate transceivers on the same chipset) in the biometric IDas shown in, or a single component switching between a tag mode and a reader mode, as explained above. In other examples, the wireless communication chipmay be another suitable wireless communication device, such as a Bluetooth® chip.

9 FIG. 602 108 110 114 116 614 614 602 In, the aerosol-generating deviceincludes the controller, the memory, the NFC tag, the NFC reader, and the wireless communication chip, all of which are described above. In this example, the wireless communication chipis an optional component in the device.

602 908 602 928 908 928 602 924 928 602 908 602 116 602 930 908 928 908 602 602 908 602 The aerosol-generating devicemay be unlocked through the use of the biometric ID. For example, the aerosol-generating devicecan obtain the verified personal dataor a representation thereof from the biometric ID. For instance, the verified personal datamay be transmitted to the devicevia the wireless communication chip. More specifically, the verified personal datamay be received by the aerosol-generating devicewhen the biometric IDis placed near or in contact with the aerosol-generating device, thereby enabling the NFC readerof the aerosol-generating deviceto detect the NFC tagof the biometric IDand initiate receipt of the verified personal data. In such examples, the biometric IDitself may be used to unlock the device. As such, ongoing use of the aerosol-generating deviceis possible by only locating the biometric IDnear or in contact with the aerosol-generating device.

908 108 110 912 908 604 602 110 602 110 912 908 604 602 110 9 FIG. 6 FIG. 9 FIG. 6 FIG. Once the data from the biometric IDis received, the controllercan determine whether the adult consumer meets an age condition based on the received data, as explained above. For instance, a biometric of the adult consumer meeting the age condition may be stored in the memoryand used as a reference (e.g., reference datain) to compare with biometric information provided by the biometric ID. In such examples, the biometric of the adult consumer (e.g., a facial image, a fingerprint, etc.) may be established with an external device (e.g., the operator terminalof) and provided to the devicefor storing in the memoryor established with a biometric sensor (e.g., a fingerprint sensor, etc.) on the device. In other examples, identification information of the adult consumer meeting the age condition may be stored in the memoryand used as a reference (e.g., reference datain) to compare with identification information provided by the biometric ID. With this approach, the adult consumer may provide the reference identification information to an external device (e.g., the operator terminalof) during an authentication process. In turn, this reference identification information may be provided to the devicefor storing in the memory.

108 108 602 602 108 602 110 110 If the controllerdetermines that the adult consumer meets an age condition based on the received data, the controllercan unlock the aerosol-generating device. In such examples, to unlock the aerosol-generating device, the controllermay connect a power source and a heater in the device, clear a locking flag or bit set in the memory, set a flag or bit in the memory, etc.

808 908 124 102 624 602 104 1 6 FIGS.and In various embodiments, the data (e.g., verified personal data stored in the payment card, verified personal data stored in the biometric ID, a created pass, etc.) used to unlock one aerosol-generating device may be generic to multiple aerosol-generating devices, such that that same data may be employed to unlock any one of multiple different aerosol-generating devices. For example, and with reference to, the passmay be generic to multiple aerosol-generating devices including the aerosol-generating devices, and the passmay be generic to multiple aerosol-generating devices including the aerosol-generating devices. For instance, any of the passes herein may include a SKU specific to a collection of aerosol-generating devices. In such examples, the collection of aerosol-generating devices may include a similar brand of devices, aerosol-generating devices owned by and/or tied to the verified consumer, aerosol-generating devices tied to a particular operator terminal (e.g., the operator terminal), etc. With this configuration, a string data message in the pass may include the SKU or other identifying data for the collection of aerosol-generating devices.

10 FIG. 1 FIG. 10 FIG. 1000 104 102 1002 1000 As one example,depicts a systemincluding the operator terminaland the aerosol-generating deviceof, and another aerosol-generating device. While the systemofincludes two aerosol-generating devices, it should be appreciated that more than two aerosol-generating devices may be employed.

1002 1008 1010 1014 1016 108 110 114 116 102 1010 102 1012 124 126 124 102 1002 124 As shown, the aerosol-generating deviceincludes a controller, a memory, an NFC tag, and an NFC readerwhich function similar to the controller, the memory, the NFC tag, and the NFC reader, respectively, of the deviceexplained above. In this example, the memorymay include the same private key as the deviceor a different private keythat is able to decrypt the pass(encrypted by the public key). In this example, the passmay have a SKU specific to both devices,, thereby enabling the passto unlock both devices.

Additionally, any one of the aerosol-generating devices herein may interact with and be unlocked by multiple operator terminals, multiple physical documents (e.g., payment cards, biometric IDs, etc.), etc.

1 FIG. 102 104 124 102 124 102 102 For example, and with continued reference to, the aerosol-generating devicemay interact with and be unlocked by multiple operator terminals, including the operator terminal. In such examples, each additional operator terminal may receive a pass similar to the passfor unlocking the aerosol-generating device. For example, if the same consumer has multiple operator terminals (e.g., a smart phone, a smart watch, etc.), each operator terminal may include the same passor a substantially similar pass for unlocking the device. If the multiple operator terminals are owned by and/or controlled by different consumers that share the aerosol-generating device, each consumer may undergo the age verification process explained above, whereby a pass (e.g., the pass) is created and provided to or accessible by the respective operator terminal. Then, any one of the operator terminals may unlock the deviceas explained above.

8 FIG. 602 808 624 602 602 602 In other examples, and with continued reference to, the aerosol-generating devicemay interact with and be unlocked by multiple payment cards, including the payment card. In such examples, each additional payment card may receive verified personal data (e.g., a pass similar to the pass) for unlocking the aerosol-generating device. For example, if the same consumer has multiple payment cards, each payment card may include the same verified personal data for unlocking the device. If the multiple payment cards are issued to different consumers that share the aerosol-generating device, each consumer may undergo the process explained above, whereby verified personal data (e.g., a pass) is linked to a respective operator terminal. Then, any one of the operator terminals may unlock the deviceas explained above.

11 FIG. 1 FIG. 11 FIG. 1100 104 102 1104 1100 As one example,depicts a systemincluding the operator terminaland the aerosol-generating deviceof, and another operator terminal. While the systemofincludes two operator terminals, it should be appreciated that more than two operator terminals may be employed.

1104 1118 1120 1122 1134 1136 1138 118 120 122 134 136 138 104 1122 124 126 104 As shown, the operator terminalincludes a controller, a memory, a digital wallet application, an NFC tag, an NFC reader, and a displaywhich function similar to the controller, the memory, the digital wallet application, the NFC tag, the NFC reader, and the display, respectively, of the operator terminalexplained above. In this example, the digital wallet applicationmay include the same passand public keyas the operator terminalor a different pass and/or a different public key.

808 908 Further, any one of the aerosol-generating devices herein may include one or more active ingredients, as further explained below. In such examples, one or more of the active ingredients in a particular aerosol-generating device may be selectively activated for consumption based on the data (e.g., verified personal data stored in the payment card, verified personal data stored in the biometric ID, a created pass, etc.) used to unlock the aerosol-generating device

1 FIG. 102 102 102 108 124 104 106 104 124 124 108 124 108 For example, and with continued reference to, the aerosol-generating devicemay include one or more active ingredients, such as nicotine, a cannabinoid (e.g., THC, etc.), an energizing agent (e.g., caffeine, etc.), etc. that is released and consumed by the adult consumer when the deviceis used. For instance, the one or more active ingredients may be part of a consumable (e.g., a pod, a cartridge, etc.) receivable by the deviceand the consumable may provide a signal to the controllerindicating the active ingredient(s) therein. In such examples, the passmay enable activation of at least one active ingredient. For instance, during the age verification process (e.g., authentication process), the adult consumer may select one or more active ingredients via the interactive user interface on the operator terminal. In other examples, the authentication servermay select one or more active ingredients based on the consumer credentials (e.g., age, residence, etc.) received from the operator terminal. Then, when created, the passmay contain one or more selected active ingredients (e.g., an identifier for each active ingredient). As such, when the passis decrypted, the controllermay retrieve the selected active ingredient(s) from the pass, enabling the controllerto activate only the selected active ingredient(s).

808 908 Additionally, a controller in one of the aerosol-generating devices herein may prevent activation of selected active ingredient(s) based on the data (e.g., verified personal data stored in the payment card, verified personal data stored in the biometric ID, a created pass, etc.) used to unlock the aerosol-generating device.

1 FIG. 108 106 104 124 124 108 124 108 For example, and with continued reference to, the controllermay prevent activation of selected active ingredient(s). For instance, during the age verification process (e.g., authentication process), the adult consumer may select one or more restricted active ingredients. In other examples, the authentication servermay select one or more restricted active ingredients based on the consumer credentials (e.g., age, residence, etc.), ages of others in the consumer's household, etc. received from the operator terminal. When created, the passmay contain one or more restricted active ingredients. Then, when the passis decrypted, the controllermay retrieve the restricted active ingredient(s) from the passand detect the active ingredient(s) in the consumable (e.g., based on a signal from the consumable), enabling the controllerto prevent activation of some or all of the active ingredient(s) in the consumable.

808 908 In addition, in some embodiments, the data (e.g., verified personal data stored in the payment card, verified personal data stored in the biometric ID, a created pass, etc.) used to unlock the aerosol-generating device may be required for only one or more selected active ingredients.

124 124 108 102 102 108 102 124 1 FIG. For example, the passofmay be required for only one or more selected active ingredients. In other words, some active ingredients (e.g., caffeine, etc.) may not be restricted and therefore may be consumed without the pass. In such examples, the controllermay automatically unlock the aerosol-generating devicewhen a consumable is received and detected with caffeine and/or other unrestricted ingredients (e.g., when the consumable provides a signal indicating the active ingredient(s) therein). However, if the aerosol-generating devicereceives a consumable with another active ingredient (e.g., nicotine, a cannabinoid, etc.), the controllermay maintain the aerosol-generating devicein the locked state until the passis received, as explained above.

In various embodiments, any one of the aerosol-generating devices herein may be any suitable device that heats a material therein to a temperature sufficient to release constituents of the material. As examples only, any one of the aerosol-generating devices may be an electronic-vaping (“e-vaping”) device that heats a pre-vapor formulation, a heated tobacco device that heats an aerosol-forming substrate, etc. Additionally, in some examples, any one of the aerosol-generating devices may be configured to receive a consumable designed to be depleted/expended via use. In such examples, the consumable may be removable from the aerosol-generating device when desired. As examples only, the consumable may include a cigarette, a heat stick, a pod, a cartridge, a capsule, a volatilizable material that can be optionally contained in, for example, a cartridge or capsule, etc.

12 14 FIGS.- 12 FIG. 12 FIG. 1202 1204 1206 1204 1204 1208 1210 1208 1212 1208 1214 1212 1206 1210 1212 1214 For example,depict example aerosol-generating devices employable as any one of the aerosol-generating devices. Specifically, in, an e-vaping deviceis shown as including a bodyand a mouthpieceintegral with, coupled to, or at least partially separable from the body. In the example of, the bodyincludes a reservoir, a heaterand optionally a ceramic block (not shown). The reservoiris configured to hold a pre-vapor formulation. The ceramic block is positioned to extend into the reservoirand a vapor passageto move the pre-vapor formulationtowards the mouthpiece. The heateris in thermal contact with the wick and is configured to vaporize the pre-vapor formulation, optionally drawn via the ceramic block, into the vapor passage.

1212 1212 The pre-vapor formulationis a material or combination of materials that may be transformed into a vapor. For example, the pre-vapor formulationmay be a liquid, solid, and/or gel formulation including, but not limited to, water, beads, solvents, active ingredients, ethanol, plant extracts, natural or artificial flavors, and/or vapor formers such as glycerin and propylene glycol.

1210 The heatermay be configured for resistive heating, inductive heating, infrared heating, ceramic heating, convection heating, microfluidic-channel layered heating, or any combination thereof.

1210 In some example embodiments, the heatermay include or be part of a microfluidics-or chip-based heating assembly. Such a heating assembly may include a plurality of layers. The plurality of layers may be formed from plastic, silicon, titanium, metals, ceramics, polydimethylsiloxane (PDMS), polymers, fiberglass, composites, or other materials. For example, a capillary element of the heating assembly may include a substrate defining a plurality of microchannels. The substrate may include materials such as glass, titanium, aluminum, sapphire, silicon carbide, diamond, ceramics, metals, silicon, and the like. A resistive element of the heating assembly may include a thin film resistive heating element. The thin film resistive heating element may include a low thermal conductivity material, such as, but not limited to, a glass, a plastic, a polymer, a fiberglass, a composite, a ceramic, and the like.

1210 3 3 In some example embodiments, the heatermay be a conductive structure that is configured to surround, hold, abut, or otherwise interface with a capillary element containing a pre-vapor formulation (e.g., wire coil surrounding a wick, a conductive mesh abutting an absorbent pad, a metal/alloy trace formed on a ceramic material). The conductive structure may be formed of an electrically resistive material. Examples of suitable electrically resistive materials include titanium, zirconium, tantalum, copper, and/or metals from the platinum group. Examples of suitable metal alloys include stainless steel, nickel-, cobalt-, chromium-, aluminum-titanium-zirconium-, hafnium-, niobium-, molybdenum-, tantalum-, tungsten-, tin-, gallium-, manganese-, and iron-containing alloys, and super-alloys based on nickel, iron, cobalt, stainless steel. For example, the heater may be formed of nickel aluminides (a material with a layer of alumina on the surface), iron aluminides, and other composite materials. The electrically resistive material may optionally be embedded in, encapsulated, or coated with an insulating material or vice-versa, depending on the kinetics of energy transfer and the external physicochemical properties required. In some example embodiments, the heater may include stainless steel, copper alloys, nickel-chromium alloys, iron-chromium alloys, superalloys, and combinations thereof. In some example embodiments, the heater may be a ceramic heater having an electrically resistive layer on an outside surface thereof. In some example embodiments, the heater may be constructed of an iron-aluminide (e.g., FeAl or FeAl), such as those described in U.S. Pat. No. 5,595,706, or nickel aluminides (e.g., NiAl), the entire contents of which are hereby incorporate by reference.

12 FIG. 1204 1216 1218 1216 1210 1210 As shown in, the bodyfurther includes a power sourceand a controller. The power sourceis electrically connected to the heaterand is configured to supply an electric current to the heaterduring vaping.

12 FIG. 1216 1216 In the example of, the power sourcemay include one or more batteries. In such examples, it should be understood that the shape of the battery (or batteries) for the power sourcemay vary. For example, the battery may be cylindrical, prismatic, disc-shaped, a pouch battery, or any other variation of battery shape known in the art. Additionally, it should be understood that the battery may be any of a variety of types. For example, in one embodiment, the battery may be a rechargeable battery (e.g., lithium-ion). In another embodiment, the battery may be a non-rechargeable battery (e.g., alkaline). In yet another embodiment, the battery may include silver oxide, carbon zinc, cadmium, nickel, or any another material known in the art. Furthermore, the battery may include a primary cell and/or a secondary cell. It will be understood by those of ordinary skill in the art that various changes in form and details of the battery may be made without departing from the spirit and the scope of the disclosure.

13 FIG. 13 FIG. 1302 1304 1306 1302 1312 1312 1314 1304 1312 1306 depicts a heated tobacco deviceincluding a bodyand a mouthpiece. In the example of, the aerosol-generating deviceis configured to be used with an aerosol forming substrate. The aerosol-generating substratemay be in a substrate container, as shown, or an aerosol-generating substrate may be configured to be directly received in the bodywithout a distinct container. In various embodiments, a consumable including the aerosol-forming substrateand/or a mouthpiece may be employed (e.g., instead of the mouthpiece).

1302 1310 1316 1318 1310 1310 1312 1310 1302 1312 1316 1318 1216 1218 12 FIG. As shown, the devicefurther includes a heater, a power source, and a controller. In some examples, the heatermay include an external heater, such as a crucible heater. In other examples, the heatermay include a blade that extends into the aerosol-forming substrate(e.g., at a radial center of the substrate). The heatermay be part of the device, or a consumable including the aerosol-forming substrate. The power sourceand the controllermay include a similar arrangement and components as the power sourceand the controllerofexplained above.

1212 1312 12 FIG. 13 FIG. In various embodiments, a pre-vapor formulation and an aerosol-forming substrate (e.g., the pre-vapor formulationof, the aerosol-forming substrateof, etc.) are a material or combination of materials that may yield an aerosol. An aerosol relates to the matter generated or output by the devices disclosed, claimed, and equivalents thereof. The material may include a compound (e.g., nicotine, cannabinoid, cannabimimetic agent, caffeine, etc.) that is released when the material is heated. In such an instance, an aerosol including the compound is produced when the material is heated. The heating may be below the ignition temperature to avoid a self-sustaining burning or a self-sustaining combustion of the material (i.e., in contrast to where a material is lit, such as lit-end cigarettes).

Nicotiana rustica Nicotiana tabacum. The material(s) may include a fibrous material. For instance, the fibrous material may be a botanical material. The fibrous material is configured to release a compound when heated. The compound may be a naturally occurring constituent of the fibrous material. For instance, the fibrous material may be plant material such as tobacco, and the compound released may be nicotine. The term “tobacco” includes any tobacco plant material including tobacco leaf, tobacco plug, reconstituted tobacco, compressed tobacco, shaped tobacco, or powder tobacco, and combinations thereof from one or more species of tobacco plants, such asand

Nicotiana In some example embodiments, the tobacco material may include material from any member of the genus. In addition, the tobacco material may include a blend of two or more different tobacco varieties. The tobacco material may be provided in any suitable form, including, but not limited to, tobacco lamina, processed tobacco materials, such as volume expanded or puffed tobacco, processed tobacco stems, such as cut-rolled or cut-puffed stems, reconstituted tobacco materials, blends thereof, and the like. In some example embodiments, the tobacco material is in the form of a substantially dry tobacco mass. Furthermore, in some instances, the tobacco material may be mixed and/or combined with at least one of propylene glycol, glycerin, sub-combinations thereof, or combinations thereof.

Cannabis Cannabis Cannabis Cannabis Cannabis sativa, Cannabis indica Cannabis ruderalis Cannabis sativa Cannabis indica The compound in the generated aerosol may also be a naturally occurring constituent of a medicinal plant that has a medically-accepted physiological effect (e.g., therapeutic effect, prophylactic effect). For instance, the medicinal plant may be aplant or a cannabimimetic plant (i.e., a plant with similar pharmacological effects to those of). For aplant, the compound may be a cannabinoid. Cannabinoids interact with receptors in the body to produce a wide range of effects. As a result, cannabinoids have been used for a variety of medicinal purposes (e.g., treatment of pain, nausea, epilepsy, psychiatric disorders). The fibrous material may include the leaf and/or flower material from one or more species ofplants such as, and. In some instances, the fibrous material is a mixture of 60-80% (e.g., 70%)and 20-40% (e.g., 30%). For a cannabimimetic plant, the compound may be a cannabimimetic agent. Cannabimimetic agents interact with receptors in the body to produce similar pharmacological effects as cannabinoids.

1310 13 FIG. Examples of cannabinoids include tetrahydrocannabinolic acid (THCA), tetrahydrocannabinol (THC), cannabidiolic acid (CBDA), cannabidiol (CBD), cannabinol (CBN), cannabicyclol (CBL), cannabichromene (CBC), and cannabigerol (CBG). Tetrahydrocannabinolic acid (THCA) is a precursor of tetrahydrocannabinol (THC), while cannabidiolic acid (CBDA) is precursor of cannabidiol (CBD). Tetrahydrocannabinolic acid (THCA) and cannabidiolic acid (CBDA) may be converted to tetrahydrocannabinol (THC) and cannabidiol (CBD), respectively, via heating. In an example embodiment, heat from a heater (e.g., of the heatershown in) may cause decarboxylation to convert the tetrahydrocannabinolic acid (THCA) to tetrahydrocannabinol (THC), and/or to convert the cannabidiolic acid (CBDA) to cannabidiol (CBD).

In instances where both tetrahydrocannabinolic acid (THCA) and tetrahydrocannabinol (THC) are present, the decarboxylation and resulting conversion will cause a decrease in tetrahydrocannabinolic acid (THCA) and an increase in tetrahydrocannabinol (THC). At least 50% (e.g., at least 87%) of the tetrahydrocannabinolic acid (THCA) may be converted to tetrahydrocannabinol (THC) during the heating. Similarly, in instances where both cannabidiolic acid (CBDA) and cannabidiol (CBD) are present, the decarboxylation and resulting conversion will cause a decrease in cannabidiolic acid (CBDA) and an increase in cannabidiol (CBD). At least 50% (e.g., at least 87%) of the cannabidiolic acid (CBDA) may be converted to cannabidiol (CBD) during the heating.

Cannabis Cannabis Cannabis Furthermore, the compound which is released may be or may additionally include a non-naturally occurring additive that is subsequently introduced into the fibrous material. In one instance, the fibrous material may include at least one of cotton, polyethylene, polyester, rayon, combinations thereof, or the like (e.g., in a form of a gauze). In another instance, the fibrous material may be a cellulose material (e.g., non-tobacco and/or non-cannabis material). In either instance, the compound introduced may include nicotine, cannabinoids, cannabimimetic agents, and/or flavorants. The flavorants may be from natural sources, such as plant extracts (e.g., tobacco extract,extract, cannabimimetic extract), and/or artificial sources. In yet another instance, when the fibrous material includes tobacco and/or, the compound may be or may additionally include one or more flavorants (e.g., menthol, mint, vanilla). Thus, the compound within the aerosol-forming substrate may include naturally occurring constituents and/or non-naturally occurring additives. In this regard, it should be understood that existing levels of the naturally occurring constituents of the aerosol-forming substrate may be increased through supplementation. For example, the existing levels of nicotine in a quantity of tobacco may be increased through supplementation with an extract containing nicotine. Similarly, the existing levels of one or more cannabinoids in a quantity ofmay be increased through supplementation with an extract containing such cannabinoids. Likewise, the existing levels of one or more cannabimimetic agents in a quantity of cannabimimetic material may be increased through supplementation with an extract containing such cannabimimetic agents.

14 FIG. 1402 1404 1406 1404 1406 1406 1402 1402 1404 1406 1402 1406 1402 In, an aerosol-generating deviceis shown as including a bodyconfigured to receive a consumabledesigned to be depleted/expended via use. In such examples, the bodymay include or define a recess, a cavity, etc. for receiving the consumableinserted therein. When desired, the consumablemay be removed from the recess, the cavity, etc. of the aerosol-generating device. In various embodiments, the aerosol-generating devicemay include a movable lid (not shown) that can rotate about, separate from, etc. the body. In such examples, the lid can be moved to provide and/or restrict access to the recess, the cavity, etc. and also the consumableif inserted into the device. In various embodiments, the consumablemay include a heater, an aerosol-forming substrate (e.g., as explained above), a pre-vapor formulation, a mouthpiece, etc. In other examples, one or more of the heater, the aerosol-forming substrate, the pre-vapor formulation, the mouthpiece, etc. may be a part of the aerosol-generating device.

15 16 FIGS.-A 1 FIG. 1 FIG. 1500 1600 102 1500 1600 118 104 1500 1600 118 -B illustrate example control methods,for unlocking an aerosol-generating device, such as the aerosol-generating deviceof. In various embodiments, the control methods,may be implemented at the controllerof the operator terminalin. As one example, the control methods,may be implemented as part of a device manager Finite State Machine (FSM) software implementation executed at the controller.

15 FIG. 1500 1502 124 122 104 124 124 122 124 1500 1504 As shown in, the control methodbeings at, where the passstored in the digital wallet applicationof the operator terminalis activated, as explained above. For example, a consumer may provide user input to activate the pass. For instance, and as explained above, the consumer may select the passin the digital wallet application, select an activate input associated with the pass, etc. The control methodthen proceeds to.

1504 118 114 102 104 102 136 104 114 114 102 1500 1506 At, the controllerdetects the NFC tagassociated with the aerosol-generating device. In such examples, the operator terminalmay be placed near or in contact with the aerosol-generating device. With this arrangement, the NFC readerof the operator terminalmay be placed near the NFC tag, enabling the detection of the NFC tagof the device. The control methodthen proceeds to.

1506 118 124 126 118 122 450 124 126 1500 1508 5 FIG. At, the controllerencrypts the passusing the public key. For example, the controllermay cause the digital wallet applicationto scramble, change, etc. a string data message (e.g., the string data messageof) of the pass, based on the public key. The control methodthen proceeds to.

1508 118 104 124 102 118 134 116 102 124 1500 15 FIG. At, the controllercauses the operator terminalto transmit the encrypted passto the aerosol-generating device. For example, and as explained above, the controllermay enable or activate the NFC tag, to allow the NFC readerof the aerosol-generating deviceto retrieve or otherwise receive the encrypted pass. The control methodmay end as shown in.

16 FIGS.A-B 15 FIG. 16 FIG.A 1600 1500 1600 1602 118 102 102 114 102 140 140 1600 1604 In, the control methodis similar to the control methodof, but with additional and/or alternative steps. For example, and as shown in, the control methodbeings at, where the controllerdetects a readable tag associated with the aerosol-generating devicein a locked state. In such examples, the readable tag associated with the aerosol-generating devicemay be an NFC tag (e.g., the NFC tagof the device, an NFC tag of the storage case, a QR code of the storage case, etc.). The control methodthen proceeds to.

1604 118 104 102 118 138 1600 At, the controllercauses display of an interactive user interface on the operator terminal. For example, and as explained above, in response to detecting the readable tag associated with the aerosol-generating device, the controllermay control the displayto automatically render the interactive user interface via a website, present a link to the website with the interactive user interface, etc. The control methodthen proceeds to 1606.

1606 118 106 104 102 102 118 106 1600 1608 At, the controllertransmits authenticating data and control parameter(s) to the authentication server. For example, and as explained above, a consumer may use the interactive user interface to upload a picture of an identification (e.g., a driver's license, a passport, etc.), input a date of birth, and/or specific credentials of the consumer. Also, during this time, the consumer may select other inputs, such as a specific operating system and/or device brand of the operator terminal, an owner of the device, one or control parameter(s) for the device, etc. Then, once the necessary data is provided, the consumer may select an input to case the controllerto transmit the provided data to the authentication server. The control methodthen proceeds to.

1608 118 124 106 126 124 102 106 124 118 138 124 126 106 1600 1610 At, the controllerreceives the created passprovided by the authentication serverand the public key. In this example, the created passincludes the control parameter(s) for the device. For example, and as explained above, the authenticating data provided by the consumer appropriately verifies the consumer, including his/her age, the authentication servermay create the passas explained above. Once created, the controllermay cause the displayto present a link to download the passand the public keyfrom the authentication server. The control methodthen proceeds to.

1610 118 124 122 1600 1612 16 FIG.B At, the controllerstores the passin the digital wallet application. The control methodthen proceeds toof.

1612 118 124 124 124 124 124 102 104 102 124 124 1600 1614 1600 1612 At, the controllerdetermines whether the passis activated for use. For example, the passmay be required to be activated before use. In such examples, the passmay be activated in response to user input as explained above. For instance, the consumer may be required to take active steps to activate the passby selecting the pass. In other examples, the aerosol-generating devicemay detect and prompt the operator terminalto notify the consumer that the deviceis nearby. In such examples, the consumer may then provide input to activate the pass. If the passis determined to be activated, the control methodproceeds to. If not, the control methodmay return to.

1614 118 114 102 104 102 136 104 114 136 114 102 1600 1506 1508 15 FIG. At, the controllerdetermines whether an NFC tag is detected, such as the NFC tagof the aerosol-generating device. For example, the operator terminalmay be placed near or in contact with the aerosol-generating device. In such examples, the NFC readerof the operator terminalmay be placed near the NFC tag. With this arrangement, the NFC readermay detect the NFC tagof the device. If the NFC tag is detected, the control methodproceeds to,ofexplained above, and then may end.

1614 1600 1620 1620 118 118 124 1622 1600 1612 1620 1600 1614 Reverting back to, if the NFC tag is not detected, the control methodproceeds to. At, the controllerdetermines whether a defined period of time (e.g., a time out period) has elapsed. If yes, the controllerdeactivates the passat. Then, the control methodreturns to. Otherwise, if no at, the control methodreturns to.

17 19 FIGS.- 1 FIG. 1 FIG. 1700 1800 1900 102 1700 1800 1900 108 102 1700 1800 1900 108 illustrate example control methods,,for unlocking an aerosol-generating device, such as the aerosol-generating deviceof. In various embodiments, the control methods,,may be implemented at the controllerof the aerosol-generating devicein. As one example, the control methods,,may be implemented as part of a device manager Finite State Machine (FSM) software implementation executed at the controller.

17 FIG. 1700 1702 108 124 104 124 102 1700 1704 As shown in, the control methodbeings at, where the controllerreceives the encrypted passfrom, for example, the operator terminal. In this example, the encrypted passincludes one or more control parameters for the aerosol-generating device, as explained above. The control methodthen proceeds to.

1704 108 124 108 112 110 102 124 450 112 1700 1706 At, the controllerdecrypts the received pass. For example, and as explained above, the controllermay retrieve the private keyfrom the memoryin the aerosol-generating device, and then decrypt the received pass(e.g., the string data message) using the private key. The control methodthen proceeds to.

1706 108 102 102 108 102 110 110 1700 1708 At, the controllerunlocks the aerosol-generating device. For example, to unlock the device, the controllermay connect a power source and a heater in the device, clear a locking flag or bit set in the memory, set an unlock flag or bit in the memory, etc. The control methodthen proceeds to.

1708 108 102 124 108 102 124 1700 17 FIG. At, the controllercontrols the aerosol-generating devicebased on the control parameter(s) in the pass. For example, the controllermay control the devicebased on an unlock interval setting, a temperature setting, a puff profile, a power setting, an interface setting, a consumer notification setting, and/or another suitable control parameter provided with the pass. The control methodmay end as shown in.

18 FIG. 17 FIG. 18 FIG. 17 FIG. 1800 1700 1800 1702 1804 1804 108 124 108 112 110 102 124 450 112 1800 1806 In, the control methodis similar to the control methodof, but with additional and/or alternative steps. For example, and as shown in, the control methodbeings atofexplained above, and then proceeds to. At, the controllerattempts to decrypt the received pass. For example, and as explained above, the controllermay retrieve the private keyfrom the memoryin the aerosol-generating device, and then attempt to decrypt the received pass(e.g., the string data message) using the private key. The control methodthen proceeds to.

1806 108 124 124 108 1800 1706 1708 1812 1806 124 1800 17 FIG. 18 FIG. At, the controllerdetermines whether the passwas decrypted. For example, if the passis decrypted, a flag or bit may be set. In such examples, the controllermay read the flag or bit. If yes, the control methodthen proceeds to,ofexplained above, and to. Otherwise, if no atindicating the passis invalid, the control methodmay end as shown in.

1812 108 108 1800 1814 1812 1800 1708 At, the controllerdetermines whether the unlock interval setting is met. For example, the unlock interval setting may specify a condition for transitioning back to a locked state, such as a defined period of time, a defined number of puffs, an amount consumed, etc. In such examples, the controllermay determine whether the condition is met. If yes, the control methodproceeds to. Otherwise, if no at, the control methodreturns to.

1814 108 102 102 108 102 1800 At, the controllerlocks the aerosol-generating device. For example, to lock the device, the controllermay disconnect the power source in the devicefrom the heater, set a locking flag or bit, etc. The control methodmay then end.

19 FIG. 17 18 FIGS.- 19 FIG. 18 FIG. 1900 1700 1800 1900 1902 108 124 104 124 102 1900 1804 1806 1908 In, the control methodis similar to the control methods,of, but with additional and/or alternative steps. For example, and as shown in, the control methodbeings at, where the controllerreceives the encrypted passfrom, for example, the operator terminal. In this example, the encrypted passincludes an identifier and one or more control parameters for the aerosol-generating device, as explained above. The control methodthen proceeds to,ofexplained above, and to.

1908 108 124 110 102 102 102 1900 1910 At, the controllercompares the retrieved identifier from the passwith a device identifier stored in the memoryof the device. In such examples, the identifier on the devicemay be set before, during, and/or after manufacturing of the device. The control methodthen proceeds to.

1910 108 124 450 124 124 1900 1706 1708 1812 1814 1910 1900 17 FIG. 18 FIG. At, the controllerdetermines whether the received pass(e.g., the received string data message) is valid based on the comparison. For instance, if the retrieved identifier from the passand the stored device identifier match, the passmay be valid. If yes, the control methodproceeds to,ofexplained above, then to,ofexplained above, and then may end. Otherwise, if no at, the control methodmay end.

20 FIG. 1 FIG. 1 FIG. 2000 102 2000 128 106 2000 128 illustrates an example control methodfor verifying a consumer and generating a pass for unlocking an aerosol-generating device, such as the aerosol-generating deviceof. In various embodiments, the control methodmay be implemented at the controllerof the authentication serverin. As one example, the control methodmay be implemented as part of a device manager Finite State Machine (FSM) software implementation executed at the controller.

20 FIG. 2000 2002 128 104 104 104 102 102 102 106 2000 2004 As shown in, the control methodbeings at, where the controllerreceives authenticating data and control parameter(s) from the operator terminal. For example, and as explained above, a consumer may use an interactive user interface displayed by the operator terminalto upload a picture of an identification (e.g., a driver's license, a passport, etc.), input a date of birth, and/or specific credentials of the consumer. Additionally, the consumer may select or otherwise provide other inputs, such as a specific operating system and/or device brand of the operator terminal, an owner of the device, an identifier (e.g., a device ID, a SKU, etc.) associated with the deviceone or control parameter(s) for the device, etc. This data may then be provided to the authentication server. The control methodthen proceeds to.

2004 128 132 128 132 132 106 2000 2006 At, the controllerretrieves data from the database. For example, the controllermay send a request to the databaseseeking data pertaining to the consumer. In such examples, the databasemay be a secured database (e.g., a third-party database) accessible by the authentication server. The control methodthen proceeds to.

2006 128 104 132 128 132 2000 2008 At, the controllercompares the authenticating data from the operator terminaland the consumer data from the database. More specifically, the controllermay compare the provided consumer credentials from the consumer with the verified consumer data from the database. The control methodthen proceeds to.

2008 128 2000 2010 At, the controllerdetermines whether the consumer is authenticated (e.g., age verified) based on the authenticating data and the consumer data. If yes, the control methodproceeds to.

2010 128 1610 128 104 1602 128 132 1602 2000 2012 At, the controllerreceives device data. For example, at, the controllermay receive the device identifier from the operator terminalat. In other examples, the controllermay retrieve a device identifier from the databaseor another suitable database based on one or more of the device related inputs (e.g., the device ID, the SKU, etc.) received at. The control methodthen proceeds to.

2012 128 128 132 2012 2000 2018 2012 2000 2016 At, the controllerdetermines whether the received device identifier is verified. For example, the controllermay determine that the device identifier is verified if the device identifier is present in a database (e.g., the databaseor another suitable database), has not been used before, corresponds to the device ID, the SKU, etc. If the received device identifier is verified (yes at), the control methodproceeds toexplained below. Otherwise, if the received device identifier is not verified (no at), the control methodproceeds to.

2014 128 124 124 102 2000 2016 At, the controllergenerates the passspecific to the verified consumer. In such examples, the passmay include a string data message including, for example, the received control parameter(s), an identifier for the device, a SKU, etc. The control methodthen proceeds to.

2016 128 124 124 104 128 104 124 106 2000 At, the controllertransmits the passwith the control parameter(s) and possibly other information, and a public key associated with the passto the operator terminal. As one example, the controllermay push a link to the operator terminalfor display. This link may be selected to download the passand the public key from the authentication server. The control methodmay then end.

2008 2000 2018 2018 128 104 2000 Reverting back to, if the consumer is not authenticated, the control methodproceeds to. At, the controllermay generate and transmit a notification indicating a failed authentication, an unverified device identifier, etc. to, for example, the operator terminal. The control methodmay then end.

21 24 FIGS.- 6 8 9 FIGS.and/or- 6 8 9 FIGS.and/or- 2100 2200 2300 2400 602 2100 2200 2300 2400 108 602 2100 2200 2300 2400 108 illustrate example control methods,,,for unlocking an aerosol-generating device, such as the aerosol-generating deviceof. In various embodiments, the control methods,,,may be implemented at the controllerof the aerosol-generating devicein. As one example, the control methods,,,may be implemented as part of a device manager Finite State Machine (FSM) software implementation executed at the controller.

21 FIG. 2100 2102 108 602 108 602 602 116 602 2100 2104 As shown in, the control methodbeings at, where the controllerof the aerosol-generating devicereceives verified personal data of an adult consumer from a physical document issued to and unique to that adult consumer. In this example, the verified personal data (or a portion or representative thereof) is received from a physical document, such as a government-issued biometric ID (e.g., a biometric passport, a biometric driver's license, etc.) containing verified customer data, a payment card (e.g., a bank card, etc.) containing verified customer data, etc. In such examples, the controllerreceives the verified personal data via a wireless communication, such as NFC. For example, the verified personal data may be received by the aerosol-generating devicewhen the physical document is placed near or in contact with the aerosol-generating device, thereby enabling the NFC readerof the aerosol-generating deviceto detect a wireless tag (e.g., an NFC tag) of the physical document and initiate receipt of the verified personal data. The control methodthen proceeds to.

2104 108 602 108 108 602 2104 2100 2106 2104 2100 At, the controllerdetermines whether the adult consumer meets an age condition for unlocking the aerosol-generating device. For example, the controllercan determine whether the adult consumer meets an age condition based on the verified personal data received from the physical document. In such examples, based on the verified personal data, the controllercan receive a bit value signifying the adult consumer is verified for using the aerosol-generating device(e.g., of an appropriate age), determine whether the age of the adult consumer is greater than a threshold, etc. If yes at, the control methodproceeds to. Otherwise, if no at, the control methodmay end.

2106 108 602 602 108 602 108 110 602 110 2100 At, the controllerunlocks the aerosol-generating device. In such examples, to unlock the aerosol-generating device, the controllermay connect a power source (e.g., a battery, etc.) and a heater in the deviceby, for example, generating a control signal to close a switch between the components. In other examples, the controllermay clear a locking flag or bit set in the memoryof the aerosol-generating device, set a flag or bit in the memory, etc. The control methodmay then end.

22 FIG. 8 FIG. 1 FIG. 2200 2202 108 602 604 106 602 602 2200 2204 In, the control methodbegins at, where the controllerof the aerosol-generating devicereceives an encrypted pass with verified personal data of an adult consumer from a payment card issued to and unique to that adult consumer. The payment card may be a debit card, a credit card, or any other suitable contactless bank card issued by a financial institution to the adult consumer following a verification process to authenticate the consumer. In such examples, the pass can be created specifically for the authenticated adult consumer by an operator terminal (e.g., the operator terminalof) and/or another source (e.g., the authentication serverofand/or another suitable consumer authenticating device) and then provided to the operator terminal. With this approach, the pass may include the verified personal data obtained from, for example, during an authenticating process, a mobile identification, etc. Then, the pass can be encrypted with a public key at the operator terminal and passed to the payment card, where the payment can store the encrypted pass. In some examples, the encrypted pass may include the verified personal data along with other data if desired, such as a unique identifier of the aerosol-generating device, control parameter(s) for the aerosol-generating device, etc. as explained above. The control methodthen proceeds to.

2204 108 602 108 2200 2104 2104 2200 2106 2104 2100 21 FIG. 21 FIG. At, the controllerdecrypts the pass with a private key stored on the aerosol-generating device. Once decrypted, the controllercan retrieve the verified personal data from the pass, along with other data contained therein (if applicable). The control methodthen proceeds toofexplained above. Then, if yes at, the control methodproceeds toofexplained above. Otherwise, if no at, the control methodmay end.

23 FIG. 2300 2302 108 602 108 602 602 116 602 In, the control methodbeings at, where the controllerof the aerosol-generating devicereceives verified personal data of an adult consumer from a biometric ID issued to and unique to that adult consumer. The biometric ID may be a biometric passport, a biometric driver's license, etc. issued by a government institution to the adult consumer following a verification process to authenticate the consumer. In such examples, the verified personal data may include one or more pieces of information for identifying and verifying the adult consumer, such as identification information unique to the adult consumer (e.g., a name, a date of birth, etc.), biometric information (e.g., a facial image, a fingerprint, etc.), etc. of the adult consumer. The controllerreceives the verified personal data from the biometric ID via a wireless communication, such as NFC. For example, the verified personal data may be received by the aerosol-generating devicewhen the biometric ID is placed near or in contact with the aerosol-generating device, thereby enabling the NFC readerof the aerosol-generating deviceto detect an NFC tag of the biometric ID and initiate receipt of the verified personal data.

108 602 2304 110 602 110 912 604 602 602 110 912 9 FIG. 6 FIG. 9 FIG. Then, the controllerdetermines whether the adult consumer meets an age condition for unlocking the aerosol-generating devicebased on the verified personal data. More specifically, at, the controller can determine whether the received data matches reference data stored, for example, in the memoryof the aerosol-generating device. For instance, a biometric of the adult consumer meeting the age condition may be stored in the memoryand used as a reference (e.g., reference datain) to compare with biometric information provided by the biometric ID. In such examples, the biometric of the adult consumer (e.g., a facial image, a fingerprint, etc.) may be established with an external device (e.g., the operator terminalof) and provided to the deviceor established with a biometric sensor (e.g., a fingerprint sensor, etc.) on the deviceitself. In other examples, identification information of the adult consumer meeting the age condition may be stored in the memoryand used as a reference (e.g., reference datain) to compare with identification information provided by the biometric ID. With this approach, the adult consumer may provide the reference identification information during an authentication process, as explained above.

108 2304 2304 2300 2106 2304 2300 21 FIG. If the controllerdetermines the adult consumer meets the age condition (e.g., the received data matches the stored reference data) at(yes at), the control methodproceeds toofexplained above. Otherwise, if no at, the control methodmay end.

24 FIG. 6 FIG. 2400 2402 108 602 618 622 604 108 602 622 604 In, the control methodbegins at, where the controllerof the aerosol-generating devicereceives verified personal data contained in a mobile identification (e.g., the mobile identificationof) and unique to an adult consumer. In such examples, the mobile identification containing the verified personal data may be stored in the digital wallet applicationof the operator terminal. The mobile identification may be retrieved from a government-controlled source, such as through a government-regulated website, a government-regulated application, etc., as explained above. In other examples, the controllerof the aerosol-generating devicemay alternatively receive the verified personal data contained in a proprietary ID stored in the digital wallet applicationof the operator terminaland retrieved from a private source capable of identity and age verification, as explained above.

622 604 604 108 108 602 602 Additionally, in some examples, the verified personal data (in the mobile identification or the proprietary ID) received from the digital wallet applicationof the operator terminalmay be contained in an encrypted pass, as explained above. In such examples, the pass can be encrypted with a public key at the operator terminaland then passed to the controller. Once received, the controllercan decrypt the pass with a private key stored on the aerosol-generating deviceand retrieve the verified personal data from the pass, along with other data (e.g., control parameter(s) for the aerosol-generating device) contained therein if applicable.

2402 2400 2104 2104 2400 2106 2104 2400 21 FIG. 21 FIG. Then, after the verified personal data is received at, the control methodproceeds toofexplained above. Then, if yes at, the control methodproceeds toofexplained above. Otherwise, if no at, the control methodmay end.

25 26 FIGS.- 6 8 FIGS.and/or 6 8 FIGS.and/or 2500 2600 602 2500 2600 118 604 2500 2600 118 illustrate example control methods,for transmitting verified personal data for unlocking an aerosol-generating device, such as the aerosol-generating deviceof. In various embodiments, some or all steps of the control methods,may be implemented at the controllerof the of the operator terminalin. As one example, the control methods,may be implemented as part of a device manager Finite State Machine (FSM) software implementation executed at the controller.

25 FIG. 6 FIG. 8 FIG. 2500 2502 118 604 618 604 808 118 604 808 618 808 618 622 620 604 622 2500 As shown in, the control methodbegins at, where the controllerof the operator terminallinks a mobile identification, such as the mobile identificationofstored on the operator terminalwith a payment card, such as the payment cardof. For example, the controllermay provide a selectable input on the operator terminalallowing the adult consumer to link the payment cardand the mobile identification. In some examples, a digital representation of the payment cardand the mobile identificationmay be stored in the digital wallet application. In this example, the adult consumer may access the selectable input through the applicationon the operator terminalor through the digital wallet application. The control methodthen proceeds to 2504.

2504 118 808 604 618 808 828 826 604 808 136 604 830 808 604 2500 2506 At, the controllerstores verified personal data on the payment card. For example, the operator terminalcan wirelessly communicate the verified personal data contained in the mobile identificationto the payment card, which then stores the data (e.g., the verified personal data) in the memory. In such examples, the operator terminaland the payment cardcan communicate via NFC through the NFC readerof the operator terminaland the NFC tagof the payment card, as explained above. In some examples, the verified personal data received from the operator terminalmay be contained in an encrypted pass, as explained above. The control methodthen proceeds to.

2506 830 808 808 116 602 808 116 830 808 2506 2500 2508 2506 2500 2506 At, a determination is made as to whether the NFC tagin the payment cardis powered. For example, when the payment cardis placed in the vicinity of the NFC readerof the aerosol-generating device, the payment cardreceives a signal from the NFC readerthat powers the NFC tagin the card. If yes at, the control methodproceeds to. Otherwise, if no at, the control methodmay return to.

2508 808 808 602 602 808 602 830 808 136 604 2500 At, the verified personal data stored on the payment cardis transmitted from the payment cardto the aerosol-generating devicefor unlocking the device. If the verified personal data is contained in an encrypted pass, the pass may be transmitted from the payment cardto the aerosol-generating device. Regardless of whether the verified personal data is in an encrypted pass, the verified personal data can be transmitted via the powered NFC tagin the payment cardand the NFC readerof the operator terminal, as explained herein. The control methodmay then end.

26 FIG. 1 FIG. 2600 2602 118 604 602 604 140 602 136 604 604 602 136 604 114 602 2602 2600 2602 2602 2600 2604 In, the control methodbeings at, where the controllerof the operator terminaldetermines whether an NFC tag associated with the aerosol-generating deviceis detected. For example, the operator terminalmay be placed near a storage case (e.g., the storage caseof) for the aerosol-generating device. In this example, the storage case may include an NFC tag readable by the NFC readerof the operator terminal. In other examples, the operator terminalmay be placed near the aerosol-generating deviceso that the NFC readerof the operator terminalcan read the NFC tagof the device. If no at, the control methodreturns to. Otherwise, if yes at, the control methodproceeds to.

2604 118 618 602 604 618 118 604 604 606 618 606 118 118 618 606 2600 2606 6 FIG. At, the controllerretrieves a mobile identification, such as the mobile identificationofunique to the adult consumer. For example, in response to detecting the NFC tag associated with the aerosol-generating device, the operator terminalcan be used to initiate one or more events to retrieve the mobile identificationfrom the government-controlled source. For instance, and as explained above, the controllermay cause the operator terminalto launch a web browser at a government-regulated website or launch a government-regulated application installed on the operator terminalto communicate with the web serverand access the mobile identificationthrough the web server. In such examples, the controllermay generate a command to launch the web browser or the government-regulated application having an interactive user interface, thereby allowing the adult consumer to input credentials, such as consumer authenticating data as explained above. Once the adult consumer is authenticated, the controllercan receive the mobile identificationcontaining verified personal data from the web server. In some examples, the verified personal data may be contained in an encrypted pass, as explained above. The control methodthen proceeds to.

2606 118 618 622 604 2600 2608 At, the controllerstores the mobile identificationcontaining the verified personal data in the digital wallet applicationof the operator terminal. The control methodthen proceeds to.

2608 118 114 602 2600 2608 2608 2600 2610 604 602 136 604 114 602 2602 2600 2602 2602 2600 2604 At, the controllerdetermines whether the NFC tagof the aerosol-generating deviceis detected. If no, the control methodreturns to. Otherwise, if yes at, the control methodproceeds to. For example, the operator terminaland the aerosol-generating devicemay be placed near each other so that the NFC readerof the operator terminalcan read and detect the NFC tagof the device. If no at, the control methodreturns to. Otherwise, if yes at, the control methodproceeds to.

2610 618 602 602 602 604 602 2600 At, the verified personal data contained in the mobile identificationis transmitted to the aerosol-generating devicefor unlocking the device. If the verified personal data is contained in an encrypted pass, the pass may be transmitted to the aerosol-generating device. Regardless of whether the verified personal data is in an encrypted pass, the verified personal data can be transmitted from the operator terminalto the aerosol-generating devicevia NFC, as explained herein. The control methodmay then end.

While some example embodiments have been disclosed herein, it should be understood that other variations may be possible. Such variations are not to be regarded as a departure from the spirit and scope of the present disclosure, and all such modifications as would be obvious to one skilled in the art are intended to be included within the scope of the following claims.

Although described with reference to specific examples and drawings, modifications, additions and substitutions of example embodiments may be variously made according to the description by those of ordinary skill in the art. For example, the described techniques may be performed in an order different with that of the methods described, and/or elements such as the described system, architecture, devices, circuit, and the like, may be connected or combined to be different from the above-described methods, or results may be appropriately achieved by other elements or equivalents.

Illustrative Embodiment 1. An aerosol-generating device comprises a memory configured to store computer-readable instructions and a private key, and a controller configured to execute the computer-readable instructions to cause the aerosol-generating device to receive, from an operator terminal via near-field communication (NFC), an encrypted pass, the encrypted pass including at least one control parameter for the aerosol-generating device, the encrypted pass specific to an authenticated consumer, decrypt the pass using the stored private key to retrieve the at least one control parameter for the aerosol-generating device, and in response to decrypting the pass, unlock the aerosol-generating device and control the aerosol-generating device based on the at least one control parameter.

Illustrative Embodiment 2. The aerosol-generating device of illustrative embodiment 1, wherein the encrypted pass enables activation of at least one selected active ingredient.

Illustrative Embodiment 3. The aerosol-generating device of illustrative embodiment 2, wherein the encrypted pass prevents activation at least one selected active ingredient.

Illustrative Embodiment 4. The aerosol-generating device of illustrative embodiment 2, wherein the at least one selected active ingredient includes at least one of nicotine, caffeine, and a cannabinoid.

Illustrative Embodiment 5. The aerosol-generating device of illustrative embodiment 1, wherein the encrypted pass is required for only one or more selected active ingredients.

Illustrative Embodiment 6. The aerosol-generating device of illustrative embodiment 1, furthering comprising an aerosol-forming substrate, a heater configured to heat the aerosol-forming substrate, and a power source configured to provide power to the heater.

Illustrative Embodiment 7. The aerosol-generating device of illustrative embodiment 1, furthering comprising a pre-vapor formulation, a heater configured to vaporize the pre-vapor formulation, and a power source configured to provide power to the heater.

Illustrative Embodiment 8. The aerosol-generating device of illustrative embodiment 1, wherein the aerosol-generating device is configured to receive a consumable including an aerosol-forming substrate or a pre-vapor formulation.

Illustrative Embodiment 9. The aerosol-generating device of illustrative embodiment 8, wherein the aerosol-generating device is in a locked state when the consumable is received.

Illustrative Embodiment 10. The aerosol-generating device of illustrative embodiment 1, wherein the encrypted pass is generic to a plurality of aerosol-generating devices, and wherein the plurality of aerosol-generating devices includes the aerosol-generating device.

Illustrative Embodiment 11. The aerosol-generating device of illustrative embodiment 1, wherein the encrypted pass is a first encrypted pass and the authenticated consumer is a first authenticated consumer, and the controller is configured to cause the aerosol-generating device to receive a second encrypted pass specific to a second authenticated consumer, decrypt the second encrypted pass, and in response to decrypting the pass, unlock the aerosol-generating device.

Illustrative Embodiment 12. The aerosol-generating device of illustrative embodiment 1, wherein the pass is not transferable to another consumer.

Illustrative Embodiment 13. The aerosol-generating device of illustrative embodiment 1, wherein the pass is specific to the operator terminal.

Illustrative Embodiment 14. The aerosol-generating device of illustrative embodiment 1, wherein the aerosol-generating device includes an NFC tag detectable by the operator terminal to initiate reception of the encrypted pass, and the NFC tag is only active when the aerosol-generating device is in a locked state.

Illustrative Embodiment 15. The aerosol-generating device of illustrative embodiment 1, wherein the at least one control parameter includes a unlock interval setting for the aerosol-generating device, and the controller is configured to cause the aerosol-generating device to automatically lock when the unlock interval setting is met.

Illustrative Embodiment 16. The aerosol-generating device of illustrative embodiment 15, wherein the unlock interval setting is at least a user defined setting.

Illustrative Embodiment 17. The aerosol-generating device of illustrative embodiment 15, wherein the unlock interval setting is at least a defined period of time.

Illustrative Embodiment 18. The aerosol-generating device of illustrative embodiment 17, wherein the defined period of time is no more than thirty minutes.

Illustrative Embodiment 19. The aerosol-generating device of illustrative embodiment 15, wherein the encrypted pass includes an identifier specific to the aerosol-generating device, and the controller is configured to cause the aerosol-generating device to decrypt the pass using the stored private key to retrieve the identifier, determine whether the received pass is valid based on the identifier, and in response to the pass being valid, unlock the aerosol-generating device, and control the aerosol-generating device based on the at least one control parameter.

Illustrative Embodiment 20. The aerosol-generating device of illustrative embodiment 19, wherein the controller is configured to cause the aerosol-generating device to compare the retrieved identifier in the pass with a device identifier stored in the memory and determine whether the received pass is valid based on the comparison.

Illustrative Embodiment 21. The aerosol-generating device of illustrative embodiment 1, wherein the at least one control parameter includes at least one of a temperature setting, a puff profile, an interface setting, a consumer notification setting, and a power setting for the aerosol-generating device.

Illustrative Embodiment 22. The aerosol-generating device of illustrative embodiment 1, wherein the pass specific to the authenticated consumer is created based on an age verification process.

Illustrative Embodiment 23. A method for unlocking an aerosol-generating device in communication with an operator terminal, comprises receiving, from an operator terminal via near-field communication (NFC), an encrypted pass including at least one control parameter for an aerosol-generating device, the encrypted pass specific to an authenticated consumer, decrypting the pass using a private key to retrieve the at least one control parameter for the aerosol-generating device, and in response to decrypting the pass, unlocking the aerosol-generating device and controlling the aerosol-generating device based on the at least one control parameter.

Illustrative Embodiment 24. The method of illustrative embodiment 23, wherein the at least one control parameter includes a unlock interval setting for the aerosol-generating device, and the method further comprises automatically locking the aerosol-generating device when the unlock interval setting is met.

Illustrative Embodiment 25. The method of illustrative embodiment 24, wherein the unlock interval setting is at least a user defined setting.

Illustrative Embodiment 26. The method of illustrative embodiment 24, wherein the unlock interval setting is at least a defined period of time.

Illustrative Embodiment 27. The method of illustrative embodiment 26, wherein the defined period of time is no more than thirty minutes.

Illustrative Embodiment 28. The method of illustrative embodiment 23, wherein the pass specific to the authenticated consumer is created based on an age verification process.

Illustrative Embodiment 29. The method of illustrative embodiment 23, further comprising enabling activation of at least one selected active ingredient in the aerosol-generating device based on the pass.

Illustrative Embodiment 30. The method of illustrative embodiment 23, further comprising preventing activation of at least one selected active ingredient in the aerosol-generating device based on the pass.

Illustrative Embodiment 31. The method of illustrative embodiment 23, wherein the encrypted pass includes an identifier specific to the aerosol-generating device, decrypting the pass using the private key includes decrypting the pass to retrieve the identifier, and unlocking the aerosol-generating device includes determining whether the received pass is valid based on the identifier, and in response to the pass being valid, unlocking the aerosol-generating device.

Illustrative Embodiment 32. The method of illustrative embodiment 31, wherein determining whether the received pass is valid based on the identifier includes comparing the retrieved identifier in the pass with a device identifier and determining whether the received pass is valid based on the comparison.

Illustrative Embodiment 33. The method of illustrative embodiment 23, wherein the at least one control parameter includes at least one of a temperature setting, a puff profile, an interface setting, a notification setting, and a power setting for the aerosol-generating device.

Illustrative Embodiment 34. The method of illustrative embodiment 23, wherein receiving, from the operator terminal via NFC, the encrypted pass from the operator terminal, the encrypted pass includes receiving the encrypted pass stored in a digital wallet application of the operator terminal.

Illustrative Embodiment 35. A method for unlocking an aerosol-generating device in communication with an operator terminal, comprises activating a pass stored in an application of an operator terminal in response to user input, the pass including at least one control parameter for an aerosol-generating device, the pass specific to a consumer, detecting a near-field communication (NFC) tag associated with the aerosol-generating device, in response to detecting the NFC tag and activating the pass, encrypting the pass stored in the application using a public key stored in the application, and transmitting, to the aerosol-generating device via NFC, the encrypted pass including the at least one control parameter for controlling the aerosol-generating device.

Illustrative Embodiment 36. The method of illustrative embodiment 35, wherein the at least one control parameter includes at least one of a unlock interval setting, a temperature setting, a puff profile, an interface setting, a notification setting, and a power setting for the aerosol-generating device.

Illustrative Embodiment 37. The method of illustrative embodiment 35, further comprising displaying an interactive user interface for authenticating the consumer.

Illustrative Embodiment 38. The method of illustrative embodiment 37, further comprising receiving the at least one control parameter and authenticating data specific to the consumer via the interactive user interface and transmitting the at least one control parameter and the authenticating data to an authentication server.

Illustrative Embodiment 39. The method of illustrative embodiment 38, further comprising receiving the pass including the at least one control parameter and the public key in response to the consumer being authenticated.

Illustrative Embodiment 40. The method of illustrative embodiment 35, further comprising receiving the pass including the at least one control parameter and the public key in response to the consumer completing an age verification process via the operator terminal.

Illustrative Embodiment 41. The method of illustrative embodiment 35, further comprising receiving the pass including the at least one control parameter and the public key in response to the consumer completing an age verification process via a point-of-sale terminal.

Illustrative Embodiment 42. The method of illustrative embodiment 35, wherein the application is a digital wallet application.

Illustrative Embodiment 43. A system for unlocking an aerosol-generating device, comprises an aerosol-generating device including a first memory configured to store first computer-readable instructions and a private key, and a first controller, and an operator terminal including a second memory configured to store second computer-readable instructions, a digital wallet application configured to store a pass and a public key, and a second controller. The pass includes at least one control parameter for the aerosol-generating device. The pass is specific to an authenticated consumer. The second controller is configured to execute the second computer-readable instructions to cause the operator terminal to encrypt the pass stored in the digital wallet application using the public key, and transmit, to the aerosol-generating device via near-field communication (NFC), the encrypted pass including the at least one control parameter for the aerosol-generating device. The first controller is configured to execute the first computer-readable instructions to cause the aerosol-generating device to receive, via NFC, the encrypted pass including at least one control parameter for the aerosol-generating device, decrypt the pass using the stored private key to retrieve the at least one control parameter for the aerosol-generating device, and in response to decrypting the pass, unlock the aerosol-generating device and control the aerosol-generating device based on the at least one control parameter.

Illustrative Embodiment 44. The system of illustrative embodiment 43, wherein the second controller configured to cause the operator terminal to activate the pass stored in the digital wallet application in response to user input.

Illustrative Embodiment 45. The system of illustrative embodiment 44, wherein the second controller configured to cause the operator terminal to detect an NFC tag associated with the aerosol-generating device and in response to detecting the NFC tag and activating the pass, encrypt the pass stored in the digital wallet application using the public key.

Illustrative Embodiment 46. The system of illustrative embodiment 43, wherein the private key and the public key are unique to the aerosol-generating device.

Illustrative Embodiment 47. The system of illustrative embodiment 43, wherein the at least one control parameter includes a unlock interval setting for the aerosol-generating device, and the first controller is configured to cause the aerosol-generating device to automatically lock when the unlock interval setting is met.

Illustrative Embodiment 48. The system of illustrative embodiment 43, wherein the pass includes an identifier specific to the aerosol-generating device, and the first controller is configured to cause the aerosol-generating device to decrypt the pass using the stored private key to retrieve the identifier, determine whether the received pass is valid based on the identifier, and in response to the pass being valid, unlock the aerosol-generating device and control the aerosol-generating device based on the at least one control parameter.

Illustrative Embodiment 49. The system of illustrative embodiment 48, wherein the first controller is configured to cause the aerosol-generating device to compare the retrieved identifier in the pass with a device identifier stored in the first memory and determine whether the received pass is valid based on the comparison.

Illustrative Embodiment 50. The system of illustrative embodiment 43, wherein the at least one control parameter includes at least one of a temperature setting, a puff profile, an interface setting, a notification setting, and a power setting for the aerosol-generating device.

Illustrative Embodiment 51. The system of illustrative embodiment 43, wherein the second controller is configured to cause the operator terminal to detect an NFC tag associated with the aerosol-generating device and in response to detecting the NFC tag, display an interactive user interface for authenticating the consumer.

Illustrative Embodiment 52. The system of illustrative embodiment 51, further comprising an authentication server in communication with the operator terminal. The

second controller is configured to cause the operator terminal to receive the at least one control parameter and authenticating data specific to the consumer via the interactive user interface and transmit the at least one control parameter and the authenticating data to the authentication server. The authentication server is configured to authenticate the consumer based on the authenticating data and generate the pass including the at least one control parameter.

Illustrative Embodiment 53. The system of illustrative embodiment 52, wherein the operator terminal is configured to receive the pass including the at least one control parameter and the public key in response to the consumer being authenticated.

Illustrative Embodiment 54. The system of illustrative embodiment 53, wherein the authentication server is configured to receive an identifier specific to the aerosol-generating device, and wherein the operator terminal is configured to receive the pass including the at least one control parameter, the identifier, and the public key in response to the consumer being authenticated.

Illustrative Embodiment 55. The system of illustrative embodiment 52, further comprising a storage case configured to receive the aerosol-generating device, wherein the storage case includes the NFC tag.

Illustrative Embodiment 56. The system of illustrative embodiment 52, wherein the aerosol-generating device includes the NFC tag.

Illustrative Embodiment 57. The system of illustrative embodiment 43, wherein the operator terminal is configured to receive the pass including the at least one control parameter and the public key in response to the consumer completing an age verification process via the operator terminal.

Illustrative Embodiment 58. The system of illustrative embodiment 43, wherein the operator terminal is configured to receive the pass including the at least one control parameter and the public key in response to the consumer completing an age verification process via a point-of-sale terminal.